ESET Online False Positives

[Friar Tuck]

ESET Online Scanner is quarantining and deleting valid files.  Examples:

 

Avira_free_antivirus_en.exe

 

ccsetup410.exe

 

 

 

 

 

 

 

[AdvancedSetup]

You should report it to ESET

 

How do I submit a virus, website or potential false positive sample to ESET's lab?

[Friar Tuck]

Thanks, Ron. I already did, but judging by some comments on their forums, it may not get much attention.  We'll see.

Paul

[daledoc1]

Hi, Friar_Tuck:

 

Unfortunately, since it's an ESET FP detection, there's not much (anything?) the MBAM folks can do about it.

 

Hope you get it sorted,

 

daledoc1

[Friar Tuck]

Yeah, I know. Just a heads-up to let everyone know that it's happening.

Oh, and by the way, before it downloads the scanner, it also says that I am not using Internet Explorer, but I am!

[daledoc1]

Hi:

 

Good point.

 

If you're not having luck with ESET, perhaps try reporting to the folks whose software is being hit?

http://www.piriform.com/support

http://www.avira.com/en/support-for-home

 

As far as the IE detection, it sounds to me -- as just a home user -- that the webpage is not "sniffing" your browser correctly?

Are you using any security or privacy extensions/add-ons?

Perhaps the experts/staff will have some advice on that.

(However, again, it's not an "MBAM" issue... )

 

Another thought: are you sure you aren't infected (as you recently finished up with malware cleaning over in the malware removal section)?

 

Cheers,

 

daledoc1

[Friar Tuck]

Here's  a copy of my correspondence with ESET:  (I'll have to attach it, I still can't paste here).  BTW, no other website says that I am not using Internet Explorer.  There is no option to configure the ESET scanner that was used on my PC, even though they appear to think that it was.  Are there different scanners for different browsers?  I am running Kaspersky online scanner now, just to compare their detections.  Going to take some time.

 

Oh well, It seems that I am not allowed to attach a .eml file, will try to find another way.

OK, I zipped it. Lets see if this works.

 

Re False Positives TRACK#52E9E7CDAC90.zip

[shadowwar]

Eset is correct. You probably have enabled what is equivalent of PUP detections in MBAM on eset. These really arent false positives in that case. The names they gave are correct to them.

[Friar Tuck]

Hi, Rich,

 

Thanks for your input, but if you'll reread post #7, I said there was nothing in the scanner that I could configure, it just downloaded and ran without any options.  I see what you're saying, but this was the "plain vanilla" model.  I think ESET just said "If we see something that looks like it was bundled, let's say it's bad".  I will have another opportunity to use it tomorrow, so we'll see what we get.

 

Paul

[shadowwar]

Yeah Eset is really agressive when it comes to PUPS. So what you just said pretty much hits the nail on the head. If its bundled with more then you should get they detect. Not necessarily malicous just unwanted.