Speedbit false positive?

Discussion in 'ESET Smart Security' started by psychokilla, Nov 11, 2007.

Thread Status:
Not open for further replies.
  1. psychokilla

    psychokilla Registered Member

    Joined:
    Apr 22, 2007
    Posts:
    171
    I tried to download this program :

    http://www.speedbit.com/video_accelerator/

    When I attempted to download it, ESS stopped the transfer with the attached declaration. The same thing happens with the beta version.

    Is this a false positive?
     

    Attached Files:

    Last edited: Nov 11, 2007
  2. nodyforever

    nodyforever Registered Member

    Joined:
    Oct 30, 2007
    Posts:
    549
    Location:
    PT / Lisbon
    Yes false positive...it can contain them to me adware or it will be able to have an option to choose them to me if we want or not that he is installed

    The programs free have to have some support of some form that will be able to take the enterprise to choose these options.


    sorry my bad english psychokilla
     
    Last edited: Nov 11, 2007
  3. psychokilla

    psychokilla Registered Member

    Joined:
    Apr 22, 2007
    Posts:
    171
    WTF? Was that english?
     
  4. proactivelover

    proactivelover Registered Member

    Joined:
    Apr 7, 2006
    Posts:
    840
    Location:
    Near Wilders Forums
    just scan it
    File size: 1455.5K
    redir.asp?ID=7279 packed by BINARYRES
    >redir.asp?ID=7279 packed by BINARYRES
    >>redir.asp?ID=7279 - archive WISE
    >>>redir.asp?ID=7279/data001 - OK
    >>>redir.asp?ID=7279/data002 - OK
    >>>redir.asp?ID=7279/data003 - OK
    >>>redir.asp?ID=7279/data004 - OK
    >>>redir.asp?ID=7279/data005 - OK
    >>>redir.asp?ID=7279/data006 - OK
    >>>redir.asp?ID=7279/data007 - OK
    >>>redir.asp?ID=7279/data008 - OK
    >>>redir.asp?ID=7279/data009 - OK
    >>>redir.asp?ID=7279/data010 - OK
    >>>redir.asp?ID=7279/data011 - archive BINARYRES
    >>>>redir.asp?ID=7279/data011/data001 - archive BINARYRES
    >>>>>redir.asp?ID=7279/data011/data001/data001 - archive ZIP
    >>>>>>redir.asp?ID=7279/data011/data001/data001/contents.rdf - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/menu.xul - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html - archive HTML
    >>>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html/Script.0 - OK
    >>>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html/Script.1 - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html - OK
    >>>>>redir.asp?ID=7279/data011/data001/data001 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data002 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data003 - archive ZIP
    >>>>>>redir.asp?ID=7279/data011/data001/data003/contents.rdf - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/menu.xul - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html - archive HTML
    >>>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html/Script.0 - OK
    >>>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html/Script.1 - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html - OK
    >>>>>redir.asp?ID=7279/data011/data001/data003 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data004 contains an advertising software Adware.Msearch.origin
    >>>>>redir.asp?ID=7279/data011/data001/data005 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data006 - OK
    >>>>redir.asp?ID=7279/data011/data002 packed by BINARYRES
    >>>>>redir.asp?ID=7279/data011/data002 - OK
    >>>redir.asp?ID=7279/data012 - OK
    >>>redir.asp?ID=7279/data013 - OK
    >>>redir.asp?ID=7279/data014 - OK
    >>>redir.asp?ID=7279/data015 - OK
    >>>redir.asp?ID=7279/data016 - OK
    >>>redir.asp?ID=7279/data017 packed by BINARYRES
    >>>>redir.asp?ID=7279/data017 - OK
    >>>redir.asp?ID=7279/data018 - OK
    >>>redir.asp?ID=7279/data019 - archive CAB
    In file >>>>redir.asp?ID=7279/data019/Accelerator.dll probably found virus DLOADER.Trojan
    >>>>redir.asp?ID=7279/data019/VideoAcceleratorEngine.exe - OK
    >>>>redir.asp?ID=7279/data019/VideoAccelerator.exe - OK
    >>>>redir.asp?ID=7279/data019/Collector.dll - OK
    >>>>redir.asp?ID=7279/data019/sbbotdiXP.sys - OK
    >>>>redir.asp?ID=7279/data019/sbbotdi2K.sys - OK
    >>>>redir.asp?ID=7279/data019/tray_icon.ico - OK
    >>>>redir.asp?ID=7279/data019/OK.gif - OK
    >>>>redir.asp?ID=7279/data019/Cancel.gif - OK
    >>>>redir.asp?ID=7279/data019/comtest.gif - OK
    >>>>redir.asp?ID=7279/data019/progbar.gif - OK
    >>>>redir.asp?ID=7279/data019/AniGIF.ocx - OK
    >>>>redir.asp?ID=7279/data019/VideoAcceleratorService.exe - OK
    >>>redir.asp?ID=7279/data020 - OK
    >>>redir.asp?ID=7279/data021 - OK
     
  5. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    detection:

    va21.exe » WISE » apbarSp.Speedbit.exe - a variant of Win32/AdInstaller application

    FP or not I cannot say bus I suggest you follow the faq for False Positives - where to submit to. Answer and Answer

    Cheers :)
     
  6. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,798
    Location:
    Texas
    The download contains adware or maybe worse. I didn't see your screenshot of the warning. Did you post one?
     
  7. psychokilla

    psychokilla Registered Member

    Joined:
    Apr 22, 2007
    Posts:
    171
    Added it now :)
     
  8. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,798
    Location:
    Texas
    Thank you kindly. :)
     
Thread Status:
Not open for further replies.