Nirsoft Utilities False Positive?

Discussion in 'ESET NOD32 Antivirus' started by NewtonGauss, Dec 15, 2010.

Thread Status:
Not open for further replies.
  1. NewtonGauss

    NewtonGauss Registered Member

    Joined:
    Dec 15, 2010
    Posts:
    5
    When downloading the latest zipped version of the well known Nirsoft Utilities from:

    http://launcher.nirsoft.net/download.html

    NOD32 indicates the presence of a Trojan. I suspect that this is a false positive.

    Alex
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    Not the first nor the last AV to detect Nirsoft utils as malware. Not malware but possibly unwanted risky software in work environment
     
  3. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    This doesn´t seems to be a FP.
    All files are correctly detected:

    pstpassword.exe - una variante de Win32/PSWTool.PstPassword.A
    produkey.exe - una variante de Win32/PSWTool.ProductKey
    passwordfox.exe - una variante de Win32/PSWTool.PassFox.A
    operapassview.exe - una variante de Win32/PSWTool.OperaPassView
    netpass.exe - una variante de Win32/NetPass.AA
    mspass.exe - una variante de Win32/MPass.A
    mailpv.exe - una variante de Win32/PSWTool.MailPassView.E
    iepv.exe - una variante de Win32/PSWTool.IEPassView.NAE
    dialupass.exe - una variante de Win32/PSWTool.Dialupass.F
    chromepass.exe - una variante de Win32/PSWTool.ChromePass.A
    awatch.exe - una variante de Win32/NirSoft.AdapterWatch.A
    astlog.exe - Win32/PSWTool.AsteriskLogger.104
     
  4. NewtonGauss

    NewtonGauss Registered Member

    Joined:
    Dec 15, 2010
    Posts:
    5
    There are considerably more files than you've listed. I scanned them all using NOD32 and the only one triggering any warning was awatch.exe, classified as "a potentially unwanted application".

    Alex
     
  5. drhu22

    drhu22 Registered Member

    Joined:
    Aug 21, 2010
    Posts:
    343
  6. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    I dont think that detection as a False Positive (Incorrect malware detection) or a True Positive (No malware detection )

    However, this is a Potentially Unwanted Application, not necessarily malicious

    Is not detected as a Virus or A Trojan
     
    Last edited: Dec 16, 2010
  7. drhu22

    drhu22 Registered Member

    Joined:
    Aug 21, 2010
    Posts:
    343
    What it comes down to is yes...you are ok to dl and use nirsoft utilities.
     
  8. dannyboy

    dannyboy Registered Member

    Joined:
    Jul 21, 2005
    Posts:
    113
    Location:
    UK
Thread Status:
Not open for further replies.