Jump to content
Sign in to follow this  
Serpher

Nirsoft Package False Alarm

Recommended Posts

Guest Ryan Russell

The false positive submission seems broken. Says it can't find store.immunet.com.

Share this post


Link to post
Share on other sites

Using Immunet Plus.

 

Old thread but W32.Invictus sure don´t like poor Nirsoft and many of his programs.

 

The ones which extract passwords and such are handled already (as is typical for AVs - why Nirsoft hates them, see his blog) but all these must be FP of some sort.

 

winlister.exe

whoistd.exe

UserAssistView.exe

URLStringGrabber.exe

TagsRep.exe

shexview.exe

SearchMyFiles.exe

SearchFilterView.exe

OutlookStatView.exe

OutlookAttachView.exe

NTFSLinksView.exe

NK2Edit.exe

Nircmd.exe

Nircmdc.exe

MyLastSearch.exe

mpk.exe

mweather.exe

MozillaHistoryView.exe

MIMEView.exe

MonitorInfoView.exe

MACAddressView.exe

jsae.exe

jrview.exe

InsideClipboard.exe

IECompo.exe

idenswitch.exe

grankcmd.exe

HashMyFiles.exe

faview.exe

folrep.exe

GDIView.exe

DriverView.exe

empv.exe

DotNetResourcesExtract.exe

DumpEDID.exe

DeviceIOView.exe

BlueToothCL.exe

acm.exe

AddrView.exe

 

May be you could test one of them, like MetaWeather http://nirsoft.net/utils/mweather.html Fix one, fix them all perhaps.

 

He also make 64 bit versions and here evil Invictus does not complain about:

 

shexview.exe

nircmd.exe

nircmdc.exe

GDIView.exe

DriverView.exe

 

So ok in 64bit but not 32. Strangely enough 64bit version of netpass.exe is W32.Trojan.daa9 while 32bit is clean!

 

Download all his stuff via NirLauncher http://launcher.nirsoft.net/download.html which has both 32 and 64 bit versions or WSCC http://www.kls-soft.com/wscc/index.php which only has 32 bit.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...