This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

False positive

Hello!

I tried to download this file:
http://www.nirsoft.net/utils/produkey.zip

But Astaro refuses the download because it's virus infected.
Report: SPR/PSW.ProductKey.bv.3

But this file isn't. I downloaded it on another line and scanned it with Avira. It's virus-free.

I thougt that Astaro is using also the Avira engine, but why you find a virus and Avira doesn't?

This thread was automatically locked due to age.

0 wingman over 14 years ago

HTTP scanner uses two antivirus engines. Avira and ClamAv. Are you using one or two engines?

produkey.zip MD5:edaf2b88171bf4c31855df1c9b3b3e7e - VirSCAN.org 8% Scanner(s) (3/37) found malware!
Cancel
Vote Up 0 Vote Down

Cancel
0 C3PO_01 over 14 years ago in reply to wingman

Our Astaro uses Avira and ClamAV, but I scanned it only with Avira Professional.

At your mentioned website virscan.org this file is recognized by Ikarus, Kaspersky and NOD32.

not-a-virus[[:P]]SWTool.Win32.ProductKey
not-a-virus[[:P]]SWTool.Win32.ProductKey.bv
a variant of Win32/PSWTool.ProductKey application

According to virscan.org it's not recognized by AntiVir and ClamAV. I don't understand why it is recognized by the Astaro, that uses this two engines.

I think it is just blocked by some scanners because it's reporting the product key of some programs and therefore it's considered as a hacking tool.
Cancel
Vote Up 0 Vote Down

Cancel