Win32/Adware.BHO.AV FP??

Discussion in 'NOD32 version 2 Forum' started by marcw, Apr 19, 2009.

Thread Status:
Not open for further replies.
  1. marcw

    marcw Registered Member

    Joined:
    Apr 19, 2009
    Posts:
    4
    All of a sudden I'm getting lots of infection warnings in various uninstall programs. These are happening on programs I have had installed on my system for years without any problems. One of them is Winamp version 5.31 which has been installed on my system for over 2 years. All uninstall programs are supposedly infected with Win32/Adware.BHO.AV.

    Are these false positives or is it possible something could have injected this into all of my uninstall programs??

    Here is my NOD32 info:

    NOD32 antivirus system information
    Virus signature database version: 4019 (20090418 )
    Dated: Saturday, April 18, 2009
    Virus signature database build: 15617

    Information on other scanner support parts
    Advanced heuristics module version: 1091 (20090309)
    Advanced heuristics module build: 1200
    Internet filter version: 1.002 (20040708 )
    Internet filter build: 1013
    Archive support module version: 1084 (20090415)
    Archive support module build version: 1226

    Information about installed components
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Base
    Version: 2.70.32
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Internet support
    Version: 2.70.32
    NOD32 for Windows NT/2000/XP/2003/Vista/x64 - Standard component
    Version: 2.70.32

    Operating system information
    Platform: Microsoft Windows XP
    Version: 5.1.2600 Service Pack 3
    Version of common control components: 5.82.2900
    RAM: 2048 MB
    Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ (2400 MHz)


    Thanks,
    -Marc
     
  2. mastj25

    mastj25 Registered Member

    Joined:
    Apr 20, 2009
    Posts:
    22
    I am experiencing the same issue with version 3 - virus signature as early as 4017 to current update 4021.
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    The current version 4021 shouldn't detect these files any more. If you are positive that your files are still detected, send them in a password protected archive to samples[at]eset.com with "Probable FP - BHO.AV adware" in the subject.
     
  4. mastj25

    mastj25 Registered Member

    Joined:
    Apr 20, 2009
    Posts:
    22
    Looks like it may have been 4020 that the last one was caught with. No more issues so far with 4021. Thank you.
     
  5. marcw

    marcw Registered Member

    Joined:
    Apr 19, 2009
    Posts:
    4
    I restored the quarantined files and checked them with 4021 and all seems fine now. No more FP.

    Thanks,
    -Marc
     
  6. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    I was doing a Malwarebytes scan and of course I was scanning all my disks and all my files. Anyway there were a few 'quarantined' files that popped up in red at the bottom of the screen, but when I went to look after the scan could not find any. That was really weird. o_O
     
Thread Status:
Not open for further replies.