Results 1 to 3 of 3

Thread: False Positive: NSIS Installer as "AdwarePunisher"

  1. #1
    Junior Member
    Join Date
    Apr 2006
    Location
    Salto, Uruguay.
    Posts
    2

    Arrow False Positive: NSIS Installer as "AdwarePunisher"

    Making some experiments with the 7-zip 4.37 (NSIS) installer I get an false positive: The installer is mis-identified by Spybot SD as a part of AdwarePunisher (see fpos.png).

    I compiled the installer with NSIS 2.16 with compression disabled.
    The following zip (1281KB) contains the installer, the script that I used and a par2 file which allows to obtain the files from the installer (For Quickpar: Open the par2 file and drag the installer to the windows.)
    http://rapidshare.de/files/17858034/7zy.zip.html

    Note1: Using version 1.4 Spanish. Last detection update: 2006-04-07

    Note2: I'm not related to the 7-zip development team

    Note3: The installer that can be downloaded from the 7-zip project uses LZMA compression. It isn't affected by this false positive.

    Note4: Sorry for my poor english.

  2. #2
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    Hello Guillermo,

    thanks for reporting. We have fixed this false positive. The fixed detection file will be available tomorrow.
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Junior Member
    Join Date
    Apr 2006
    Location
    Salto, Uruguay.
    Posts
    2

    Thumbs up Fixed!

    I repeated the experiments with the 2006-04-14 update and 7-zip 4.37, 4.38 and 4.39. The problem is fixed!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •