Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 658659" data-attributes="member: 32260">I found a detection error on Emsisoft related webpage:<a href="http://www.isthisfilesafe.com/sha1/10A13CB164D4CCFE573CF23555071C42FFEB40CD_details.aspx" target="_blank">log.exe Details. Is this file safe? Check the directory</a>The detection is for Nirsoft nircmdc.exe v.2.81, and it is recognized as a malware.On VirusTotal the same file is detected by Emsisoft as clean:<a href="https://www.virustotal.com/pl/file/12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261/analysis/1501777251/" target="_blank">Antivirus scan for 12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261 at 2017-08-03 16:20:51 UTC - VirusTotal</a>I downloaded the original file from NirSoft webpage, and uploaded to VirusTotal. The SHA-1 and MD5 hashes were identical with those from <a href="http://www.isthisfilesafe.com/sha1/10A13CB164D4CCFE573CF23555071C42FFEB40CD_details.aspx" target="_blank">log.exe Details. Is this file safe? Check the directory</a>. So, I submited this file to Emsisoft as a false positive.Unfortunately, Hard_Configurator installers contain this (most actual) version of nircmdc.exe, so also Hard_Configurator installers are recognized on <a href="http://www.isthisfilesafe.com/" target="_blank">&quot;http://www.isthisfilesafe.com&quot;</a> as Not Trusted.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite111" alt=":(" title="Frown&nbsp; &nbsp; :(" loading="lazy" data-shortname=":(" />Of course, on VirusTotal, the Emsisoft detection of Hard_Configurator beta 3.0.1.0 installers is clean.</blockquote>

[QUOTE="Andy Ful, post: 658659, member: 32260"] I found a detection error on Emsisoft related webpage: [URL='http://www.isthisfilesafe.com/sha1/10A13CB164D4CCFE573CF23555071C42FFEB40CD_details.aspx']log.exe Details. Is this file safe? Check the directory[/URL] The detection is for Nirsoft nircmdc.exe v.2.81, and it is recognized as a malware. On VirusTotal the same file is detected by Emsisoft as clean: [URL='https://www.virustotal.com/pl/file/12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261/analysis/1501777251/']Antivirus scan for 12459a5e9afdb2dbff685c8c4e916bb15b34745d56ef5f778df99416d2749261 at 2017-08-03 16:20:51 UTC - VirusTotal[/URL] I downloaded the original file from NirSoft webpage, and uploaded to VirusTotal. The SHA-1 and MD5 hashes were identical with those from [URL='http://www.isthisfilesafe.com/sha1/10A13CB164D4CCFE573CF23555071C42FFEB40CD_details.aspx']log.exe Details. Is this file safe? Check the directory[/URL]. So, I submited this file to Emsisoft as a false positive. Unfortunately, Hard_Configurator installers contain this (most actual) version of nircmdc.exe, so also Hard_Configurator installers are recognized on [URL='http://www.isthisfilesafe.com/']"http://www.isthisfilesafe.com"[/URL] as Not Trusted.:( [B]Of course, on VirusTotal, the Emsisoft detection of [B]Hard_Configurator [/B]beta 3.0.1.0 installers is clean.[/B] [/QUOTE]

Verification