Nirsoft Utilities False Positive?

Discussion in 'ESET NOD32 Antivirus' started by NewtonGauss, Dec 15, 2010.

Thread Status:
Not open for further replies.
  1. NewtonGauss

    NewtonGauss Registered Member

    Joined:
    Dec 15, 2010
    Posts:
    5
    When downloading the latest zipped version of the well known Nirsoft Utilities from:

    http://launcher.nirsoft.net/download.html

    NOD32 indicates the presence of a Trojan. I suspect that this is a false positive.

    Alex
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    Not the first nor the last AV to detect Nirsoft utils as malware. Not malware but possibly unwanted risky software in work environment
     
  3. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    This doesn´t seems to be a FP.
    All files are correctly detected:

    pstpassword.exe - una variante de Win32/PSWTool.PstPassword.A
    produkey.exe - una variante de Win32/PSWTool.ProductKey
    passwordfox.exe - una variante de Win32/PSWTool.PassFox.A
    operapassview.exe - una variante de Win32/PSWTool.OperaPassView
    netpass.exe - una variante de Win32/NetPass.AA
    mspass.exe - una variante de Win32/MPass.A
    mailpv.exe - una variante de Win32/PSWTool.MailPassView.E
    iepv.exe - una variante de Win32/PSWTool.IEPassView.NAE
    dialupass.exe - una variante de Win32/PSWTool.Dialupass.F
    chromepass.exe - una variante de Win32/PSWTool.ChromePass.A
    awatch.exe - una variante de Win32/NirSoft.AdapterWatch.A
    astlog.exe - Win32/PSWTool.AsteriskLogger.104
     
  4. NewtonGauss

    NewtonGauss Registered Member

    Joined:
    Dec 15, 2010
    Posts:
    5
    There are considerably more files than you've listed. I scanned them all using NOD32 and the only one triggering any warning was awatch.exe, classified as "a potentially unwanted application".

    Alex
     
  5. drhu22

    drhu22 Registered Member

    Joined:
    Aug 21, 2010
    Posts:
    371
  6. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    I dont think that detection as a False Positive (Incorrect malware detection) or a True Positive (No malware detection )

    However, this is a Potentially Unwanted Application, not necessarily malicious

    Is not detected as a Virus or A Trojan
     
    Last edited: Dec 16, 2010
  7. drhu22

    drhu22 Registered Member

    Joined:
    Aug 21, 2010
    Posts:
    371
    What it comes down to is yes...you are ok to dl and use nirsoft utilities.
     
  8. dannyboy

    dannyboy Registered Member

    Joined:
    Jul 21, 2005
    Posts:
    113
    Location:
    UK
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.