Win32/Adware.BHO.AV FP??

Discussion in 'NOD32 version 2 Forum' started by marcw, Apr 19, 2009.

Thread Status:
Not open for further replies.
  1. marcw

    marcw Registered Member

    Joined:
    Apr 19, 2009
    Posts:
    4
    All of a sudden I'm getting lots of infection warnings in various uninstall programs. These are happening on programs I have had installed on my system for years without any problems. One of them is Winamp version 5.31 which has been installed on my system for over 2 years. All uninstall programs are supposedly infected with Win32/Adware.BHO.AV.

    Are these false positives or is it possible something could have injected this into all of my uninstall programs??

    Here is my NOD32 info:

    NOD32 antivirus system information
    Virus signature database version: 4019 (20090418 )
    Dated: Saturday, April 18, 2009
    Virus signature database build: 15617

    Information on other scanner support parts
    Advanced heuristics module version: 1091 (20090309)
    Advanced heuristics module build: 1200
    Internet filter version: 1.002 (20040708 )
    Internet filter build: 1013
    Archive support module version: 1084 (20090415)
    Archive support module build version: 1226

    Information about installed components
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Base
    Version: 2.70.32
    NOD32 For Windows NT/2000/XP/2003/Vista/x64 - Internet support
    Version: 2.70.32
    NOD32 for Windows NT/2000/XP/2003/Vista/x64 - Standard component
    Version: 2.70.32

    Operating system information
    Platform: Microsoft Windows XP
    Version: 5.1.2600 Service Pack 3
    Version of common control components: 5.82.2900
    RAM: 2048 MB
    Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ (2400 MHz)


    Thanks,
    -Marc
     
  2. mastj25

    mastj25 Registered Member

    Joined:
    Apr 20, 2009
    Posts:
    22
    I am experiencing the same issue with version 3 - virus signature as early as 4017 to current update 4021.
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,411
    The current version 4021 shouldn't detect these files any more. If you are positive that your files are still detected, send them in a password protected archive to samples[at]eset.com with "Probable FP - BHO.AV adware" in the subject.
     
  4. mastj25

    mastj25 Registered Member

    Joined:
    Apr 20, 2009
    Posts:
    22
    Looks like it may have been 4020 that the last one was caught with. No more issues so far with 4021. Thank you.
     
  5. marcw

    marcw Registered Member

    Joined:
    Apr 19, 2009
    Posts:
    4
    I restored the quarantined files and checked them with 4021 and all seems fine now. No more FP.

    Thanks,
    -Marc
     
  6. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    I was doing a Malwarebytes scan and of course I was scanning all my disks and all my files. Anyway there were a few 'quarantined' files that popped up in red at the bottom of the screen, but when I went to look after the scan could not find any. That was really weird. o_O
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.