[False Virus Detection from eTrust]

So when is Piriform going to release AV?

 

[eTrust false positive?]

Another update!

 

It thinks that the install file for the newest version is a virus also

 

Here is the message:

[time 8/20/2008 9:12:11 AM: ID 14: machine xxxxx: response 8/20/2008 9:12:57 AM] The Win32/FakeAv.CX was detected in C:\...\CCSETUP210[1].EXE. Machine: xxxxx, User: xxxxx. Status: File is cured and the machine needs to reboot to complete cure.

 

I have used CCleaner for a long time, and know for a fact that is far from a virus or trojan. I can only assume that CA has failed me again with a false positive!

[eTrust false positive?]

Update... Every box on my network is now reporting this...

 

Piriform should write a thank you note to CA, as they are removing the uninstall files so CCleaner cant be uninstalled =)

[eTrust false positive?]

I am running CCleaner v.2.01.507 in a Terminal Server enviroment. It runs evertime a user logs into the TS.

 

My eTrust ITM downloaded signatures at 7:45am... At 7:51am, when the next user logged in, the realtime scanner popped the following warnings:

 

The Win32/FakeAv.CX was detected in C:\PROGRAM FILES\CCleaner\UNINST.EXE. Machine: xxxxx, User: xxxxxx . Status: Infected

and

The Win32/FakeAv.CX was detected in C:\PROGRAM FILES\CCleaner\UNINST.EXE. Machine: xxxxx, User: xxxxxx. Status: File was cured; system cure performed.

 

Do you all think this is a false positive situation? During my googleing of this, i found some mention of false positives on the file a year or so ago.