virus false positive

5 posts

pabsSeptember 21, 2007 at 5:04 AM#

virus false positive

Just wanted to let everyone know that there is another virus false positive with NSISdl, this time with Trend Micro OfficeScan 7.3:

#443121 - nsis: NSISdl et al. trigger anti-virus false positives - Debian Bug report logs

http://bugs.debian.org/443121

If anyone feels like fixing this, please cluebat Trend Micro.

It would be nice if anti-virus companies could hire competent engineers.

Anyone have any thoughts for fixing these virus false positives for good?

JoelSeptember 21, 2007 at 12:07 PM#

Change AV software....?
Sounds a thought for me 🙂

kichikSeptember 21, 2007 at 12:35 PM#

Wait a minute... Is that a false positive for the Debian version of NSISdl? That's so awesome! Someone wrote a Virus with NSIS on Debian 🙂

pabsSeptember 22, 2007 at 7:16 AM#

Joel: that is always an option, but not a permanent one - almost all av companies seem to block nsis stuff at some point in time.

kichik: I guess so 🙂

kichikSeptember 22, 2007 at 7:19 AM#

They block everything. They have automatic systems that go and block everything that's suspicious. In this case, NSISdl.dll dares to connect to the Internet and download data! Or it was probably used in some kind of virus/malware to download some vicious piece of code that the automatic systems already recognize.