What the Tech logo

What the Tech? It's as easy as 1,2,3! ( Log In | Register )
Easy as 1,2,3!

 
Reply to this topicStart new topic
> NOD32 False - Positive?, Nero Updater
manicd
post Oct 30 2009, 08:53 PM
Post #1


Silver Member
***

Group: Authentic Member
Posts: 383
Joined: 15-June 07
From: England, UK
Member No.: 70,781
Operating System: • Windows Vista - Home Basic sp2•



Hi Im in a bit of a predicament.
I own a copy of Nero 7 Premium which I used to run on my XP machine with no troubles. So I decided to install it on my Vista machine. Unfortunately the installation didn't go to smoothly so I decided to look for an Update which I eventually found and downloaded from their site.

Whilst downloading and extracting the update NOD flagged Win32/Toolbar.AskSBar contained in the update as a "Potentially Unwanted Program".
Attached Image

Attached Image

Is this a false positive because I'm sure the company who make Nero aren't in the business of distributing Malware or Unwanted programs.
So basically I'm unsure on what to do.
Go to the top of the page
 
+Quote Post
paws
post Oct 31 2009, 03:49 AM
Post #2


SuperMember
Group Icon

Group: Global Moderator
Posts: 2,476
Joined: 11-November 04
From: Lat' 51N, Long' not much East or West, (UK)
Member No.: 18,221
Operating System: Win XP (Pro & Home) Win 2000, Linux



Hi, The Ask toolbar is often flagged up as a potentially unwanted application........ It can be uninstalled (usually) through Control Panel Add and Remove Prog...
It often comes "bundled" with some software packages and in the case of Nero there is a tickbox on installing Nero for either installing it or not having it installed
(although its easy to miss....) some malware experts consider it to have spyware characteristics.....

If you are worried about it then follow the procedures to post your logs in the Infection Removal forum
Regards
paws
Go to the top of the page
 
+Quote Post
8210GUY
post Oct 31 2009, 04:52 AM
Post #3


Advanced Member
****

Group: Visiting Tech
Posts: 664
Joined: 15-May 09
From: UK
Member No.: 85,793
Operating System: Win 98se, Windows 2000, xp Home sp3, xp Pro sp3, Vista Ultimate 32bit\64bit.



TBH you have nothing to worry about, I would not call it a false positive, it is 100% right in warning you, BUT, it is not as alarmist as it sounds, most people know of say the Google toolbar, it adds a search box to your browser, well this is no different, basically when you installed it you did not UNCHECK the box that asks about this, what that means is your default search engine will become Ask, and you will have an Ask search box on your browser, all you have to do is uninstall the Ask toolbar using add\remove and it will be gone, or use Revo to make sure you get it all.

This is no different than say CCleaner wanting to add Yahoo toolbar (search) to your system during the install, simply watch out for the check boxes and un-tick what you do not want, the reason you got an alert was because it was not installed in it's own right, so it saw it as a possible threat, as thats often how infections become installed, as part of a sub install of the main install, so just uninstall it, reset your search engine default to who you normally use (most choose Google) as it will of changed that as well, and you will be fine, this was not a nasty infecting you, just an underhand way of installing something you may not want by not watching out for the check boxes, but if you look during Nero's install it is clearly visible, hope this stops you worrying too much.
Go to the top of the page
 
+Quote Post
paws
post Oct 31 2009, 07:10 AM
Post #4


SuperMember
Group Icon

Group: Global Moderator
Posts: 2,476
Joined: 11-November 04
From: Lat' 51N, Long' not much East or West, (UK)
Member No.: 18,221
Operating System: Win XP (Pro & Home) Win 2000, Linux



Good post 8210GUY
thumbup.gif
Nicely summed up
Regards
paws
Go to the top of the page
 
+Quote Post
manicd
post Nov 12 2009, 09:46 AM
Post #5


Silver Member
***

Group: Authentic Member
Posts: 383
Joined: 15-June 07
From: England, UK
Member No.: 70,781
Operating System: • Windows Vista - Home Basic sp2•



Hi Guys

Sorry for the late reply I have been ill of late suffering with something called Oedema (not nice).
I told NOD to ignore the Toolbar but it keeps on popping up. Should I omit it from future scans?
Go to the top of the page
 
+Quote Post
8210GUY
post Nov 12 2009, 06:40 PM
Post #6


Advanced Member
****

Group: Visiting Tech
Posts: 664
Joined: 15-May 09
From: UK
Member No.: 85,793
Operating System: Win 98se, Windows 2000, xp Home sp3, xp Pro sp3, Vista Ultimate 32bit\64bit.



Sounds nasty, hope your getting through it.
As to NOD you have a couple of choices, the first choice is do you really want the toolbar to start with, if you don't then uninstall it and NOD should be happy, otherwise if you want to keep it then you have 2 options, add it to the white list\ignored part, and\or submit it as a false positive to NOD and hopefully they will update this in future definitions, hope this helps, and make sure you get better, theres no sick pay on this job lol.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 


RSS Time is now: 21st November 2009 - 03:32 AM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy