mpod
10th July 2005 08:56 UTC
AVG anti-virus reporting false positives on NSIS
AVG Free Edition just today popped up 4 "Downloader.Apropo.CA Trojan Horse" "Virus found!" alerts, one each for the following NSIS-based install/uninstall programs:
JavaHMO 2.4 installer
JavaHMO 2.4 uninst.exe
Galleon beta 10 installer
Galleon beta 12 installer
Galleon and JavaHMO are both SourceForge TiVo-related projects. Their developer pointed me to the link ( http://nsis.sourceforge.net/index.ph...D=2&tt_news=24 ) that led me here. Based on the info from that page I assume Grisoft just updated its definitions and AVG is now wrongly reporting the NSIS plugin.
I know nothing about this NSIS but that link said I should report false detections in this forum, so here's this post. AVG Free Edition's home page is here:
http://free.grisoft.com/doc/1
But I wouldn't be surprised if their commercial versions were also affected:
http://www.grisoft.com/
Forgot to add: my AVG installation updates its virus definitions daily at 3:00am, So I assume this is due to a definition update that occurred between Friday and Saturday mornings (Pacific Time).
Afrow UK
10th July 2005 12:38 UTC
Yep I'm getting it too. I've disabled AVG for now because I know it will corrupt all my installers on the system otherwise.
-Stu
Comperio
12th July 2005 01:28 UTC
FWIW:
I haven't noticed any problems, but then again I don't use Galleon or JavaHMO.
My version of AVG Free is 7.0.323. Just downloaded the latest updates this morning and did a full system scan and found nothing. (And I have quite a few application installs from SourceForge.)
Still, it probably wouldn't hurt to report the problem to AVG anyway.
MamiyaOtaru
12th July 2005 09:57 UTC
Been getting a lot of reports like this lately. All in the last few weeks people who have downloaded the Privateer Remake have been complaining of positives from Bullguard, and now AVG.
bullguard thread
AVG thread
Pretty freaking annoying: people always seem to assume the worst. No one ever wonders why theirs is the only program picking something up. It's just easier to assume we are malicious :-/
Joost Verburg
12th July 2005 12:30 UTC
I contacted AVG and hope they will solve it soon.
Afrow UK
12th July 2005 13:50 UTC
Seems to be solved.
No false reports this morning.
-Stu