NSIS False Positives: Difference between revisions
From NSIS Wiki
Jump to navigationJump to search
No edit summary |
|||
Line 1: | Line 1: | ||
There are hundreds of false positive made with NSIS. This page contains a list of some of them. | There are hundreds of false positive made with NSIS. This page contains a list of some of them. | ||
== How Can I Help? == | |||
The following steps should be done for NSIS installer and the ZIP file. You can also perform them for your own installer. | |||
# Upload NSIS to [https://www.virustotal.com/#/home/upload VirusTotal] | |||
# Go to the Community tab ([https://www.virustotal.com/#/file/bd3b15ab62ec6b0c7a00f46022d441af03277be893326f6fea8e212dc2d77743/community example for 3.03]) and vote as safe | |||
# In the detection tab, notice which vendors have a false positive | |||
# Use [https://www.techsupportalert.com/content/how-report-malware-or-false-positives-multiple-antivirus-vendors.htm#Easily_Submit_Malware_To_All_Vendors this list] to notify each of them of the false positive | |||
# Use [https://falsepositivewatch.com False Positive Watch] to get notified of changes to VirusTotal | |||
# Repeat the process when there is a new false positive | |||
== NSIS Virus Checker False Positives == | == NSIS Virus Checker False Positives == | ||
'''Bolded entries are still detected by the AV!''' | '''Bolded entries are still detected by the AV!''' |
Revision as of 00:48, 6 February 2018
There are hundreds of false positive made with NSIS. This page contains a list of some of them.
How Can I Help?
The following steps should be done for NSIS installer and the ZIP file. You can also perform them for your own installer.
- Upload NSIS to VirusTotal
- Go to the Community tab (example for 3.03) and vote as safe
- In the detection tab, notice which vendors have a false positive
- Use this list to notify each of them of the false positive
- Use False Positive Watch to get notified of changes to VirusTotal
- Repeat the process when there is a new false positive
NSIS Virus Checker False Positives
Bolded entries are still detected by the AV!
- McAfee - Apr 16, 2016 to May 2, 2016
- AntiVir - Sep 26, 2011 (see Virustotal results from Sep 26, 2011)
- Symantec 2011 - Sep 26, 2011 (see Virustotal results from Sep 26, 2011). Fixed on Sep 29, 2011
- Sunbelt - Dec 9, 2009 (see Virustotal results from Dec 22, 2009)
- McAfee VirusScan (DAT Version 5797) - Nov 9, 2009
- Sunbelt - June 5, 2009 (see Virustotal results from June 5, 2009, June 13, 2009)
- Vipre - May 11, 2009
- Symantec Enterprise - Oct 31, 2007 Definitions
- McAfee VirusScan (DAT Version 5150) - Oct 26, 2007
- AVG Antivirus - Oct 8, 2007
- Trend Micro OfficeScan - Sep 21, 2007
- Sophos - Aug 18, 2007
- Norton - Jul 17, 2007
- AntiVir Guard - Jun 27, 2007
- AVG Antivirus - Dec 7, 2006
- NOD32 - Nov 14, 2006
- F-PROT - Sep 21, 2006
- F-Secure - Sep 13, 2006
- Kaspersky - Sep 13, 2006
- Norman - Sep 11, 2006
- AVG Antivirus - Sep 11, 2006
- Fortinet - Jul 3, 2006
- AntiVir - Jul 1, 2006
- Norton & Symantec - Jul 1, 2006
- Kaspersky - Jun 21, 2006
- BitDefender - Jun 13, 2006
- OneCare - Jun 07, 2006
- AVG Antivirus - Jun 06, 2006
- Norton - May 20, 2006
- AntiVir - Feb 22, 2006
- Ad-Aware - Nov 22, 2005
- Mcafee - Nov 16, 2005
- AntiVir - Oct 12, 2005
- ArcaVir - Aug 21, 2005
- MS Antispyware - Aug 09, 2005
- MS Antispyware - Jul 26, 2005
- AVG Antivirus - Jul 10, 2005
- MS Antispyware - May 18, 2005
- MS Antispyware - Apr 22, 2005
- AVG Antivirus - Apr 21, 2005
- MS Antispyware - Mar 01, 2005
- PCCillin - Sep 17, 2004
- BitDefender - Aug 29, 2004
- Mcafee - Aug 26, 2004
- Sophos AV - Aug 16, 2004
- Norton - Aug 09, 2004
- Mcafee - Mar 11, 2004
- Norton - Feb 24, 2004
False Positive By Anti-Malware programs
- Symantec (Norton): 5
- MS Antispyware: 5
- AVG Spyware: 5
- AntiVir: 4
- Mcafee: 4
- Kaspersky: 2
- BitDefender: 2
- Sunbelt: 2
- F-PROT: 1
- F-Secure: 1
- Norman: 1
- Ad-Aware: 1
- ArcaVir: 1
- Fortinet: 1
- OneCare: 1
- PCCillin: 1
- Sophos: 1
- Spyware Terminator: 1
- StopZilla: 1
- Total False Positives: 38
Where to report false positives
- Avira: https://analysis.avira.com/en/submit
- Bitdefender: http://www.bitdefender.com/submit/
- Fortinet: http://fortiguard.com/virusscanner
- Symantec (Norton): https://submit.symantec.com/false_positive/
- Trend Micro: http://www.trendmicro.com/us/about-us/detection-reevaluation/
- CrowdStrike Falcon: https://www.crowdstrike.com/contact-us/#VTscanner_(at)_crowdstrike_(dot)_com
- Various: How to Report Malware or False Positives to Multiple Antivirus Vendors
Online Virus Scanners
Here is a list of free online virus scanners useful to check NSIS installers and stubs for false positives:
- Jotti's malware scan (19 engines)
- Metadefender (43 engines)
- VirusTotal (56 engines)
- VirusTotal Alternatives
- Dr. Web
- Fortinet
- Kaspersky