Avast WEBforum

Other => Viruses and worms => Topic started by: Lisandro on June 26, 2008, 05:02:19 PM

Title: ProductKey as a false positive
Post by: Lisandro on June 26, 2008, 05:02:19 PM

Just try to download  ::)
http://www.nirsoft.net/utils/product_cd_key_viewer.html

Title: Re: ProductKey as a false positive
Post by: ProloSozz on November 26, 2010, 11:18:54 AM

Nirsoft ProduKey is still considered as false positive!

Caution: only produkey_setup.exe is considered as false positive, not produkey.zip or produkey-x64.zip

And there is another problem appearing with that:

When www.nirsoft.net/utils/produkey_setup.exe is blocked, it is blocked as "malicious URL" ... but even when having web-shield expert settings "action" set to "ask" and not to "abort connection" with all 3 (virus/pup/suspicious).

Additional problem: the folder where the file should be saved to is not movable or deletable ...

so the questions are:

- in which log does this url-blocking appear?
- how to disable that specific blocking / where to add it to which exception-list

BTW: is is obvious that most of the nirsoft-tools could be considered as pups - so where to declare that all on the website www.nirsoft.net is not pup (but still has to be checked for virus)?

Title: Re: ProductKey as a false positive
Post by: Lisandro on November 26, 2010, 01:45:37 PM

I think the actual detection is as PUP, isn't it?

Title: Re: ProductKey as a false positive
Post by: jsejtko on November 26, 2010, 03:37:31 PM

hi there,

url block will be removed in the next vps update.

Regards