NOD32 False Detection

Discussion in 'NOD32 version 2 Forum' started by Filipe Lage, Feb 13, 2006.

Thread Status:
Not open for further replies.
  1. Filipe Lage

    Filipe Lage Registered Member

    Joined:
    Feb 13, 2006
    Posts:
    1
    Hi

    I'm the lead developer of EzLink NG ( www.ezlinkng.com ).

    Some of our clients (that use NOD32) are reporting that some files on installation are "possibly infected" with an unknown virus. Other clients (with NAV, Avast and others) have no problems installing.

    We garantee that our files are clean of virus (we use Avast antivirus and the files are exactly the ones compiled by VB6), but for some reason, NOD32 reports what is called a "false positive".

    Can you confirm that this is a problem with NOD32 detection?
    (you can download EzLink NG from the website if you wish to test all files)

    Thank you

    // FCLage
    fclage [ at ] ezlinkng.com
     
    Last edited by a moderator: Feb 13, 2006
  2. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    Hi,
    I think that Marcos or Happy Bytes have looked at this post, anyway you can submitt the files to samples at eset.com
    Please put the files in one RAR or ZIP file with infected as password and send it to the address I indicated.

     
  3. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    Scanned disks, folders and files: C:\Documents and Settings\...\Desktop\install\
    C:\Documents and Settings\...\Desktop\install\fcl_setup.exe - is OK
    C:\Documents and Settings\...\Desktop\install\fcl_setup.exe.manifest - is OK
    C:\Documents and Settings\...\Desktop\install\language_0.txt - is OK
    C:\Documents and Settings\...\Desktop\install\LANGUAGE_1030.txt - is OK
    C:\Documents and Settings\...\Desktop\install\LANGUAGE_1031.txt - is OK
    C:\Documents and Settings\...\Desktop\install\LANGUAGE_1036.TXT - is OK
    C:\Documents and Settings\...\Desktop\install\language_1043.txt - is OK
    C:\Documents and Settings\...\Desktop\install\language_2070.txt - is OK
    C:\Documents and Settings\...\Desktop\install\msinet.ocx - is OK
    C:\Documents and Settings\...\Desktop\install\MSVBVM60.DLL - is OK
    C:\Documents and Settings\...\Desktop\install\VB6STKIT.DLL - is OK
    C:\Documents and Settings\...\Desktop\install\zlib.dll - is OK
    Number of scanned files: 12
    Number of threats found: 0
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    The fp shall be fixed with the next update.
     
  5. TimaN

    TimaN Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    125
    Location:
    Tulsa, OK
    Could this also be a false positive from NOD and a few other antiviruses?
     

    Attached Files:

    • 0.jpg
      0.jpg
      File size:
      105.4 KB
      Views:
      236
  6. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    I guess it could be a false positive if the file you scanned is not the real Win32/Tool.EvID4226 application :)
    Note that it is detected as a Tool, not a virus or trojan... :)
    Cheers :)
     
Thread Status:
Not open for further replies.