Nod32 AV thinks x264 creates worms?

[tomos]

woke up this morning and checked my encodes to find it was goosed. after the first pass was created, nod32 (my A/V prog) kicked into life and removed the stats file saying it was a worm???

08/07/2006 12:00:54 AMON file C:\x264 - stats\stats.temp Win32/Rexli.A worm quarantined - deleted TJ\TJ Event occurred on a new file created by the application: C:\Program Files\x264\x264.exe. The file was moved to quarantine. You may close this window.

weird huh? never seen this happen on any of these PC's before. no virus notices on anything else on my system either - just the stats file created by x264 fsr

i scanned the same stats file remotely and the other PCs also think its a worm and want to remove it

anyone else seen this before?

[check]

no idea, NOD32 has never done this for me. You can add the extension .stats to the scanning exclusion list to get around it.

[tomos]

already done that for that single folder where i store the stats files.

weird tho. like you said, never happened before. just this one for some freaky reason

[Sharktooth]

report the false positive to the nod32 dev team.

[tomos]

will do. i guess this is the risk with using heuristics.

[Sharktooth]

this is the risk using an antivirus...

[tomos]

?? better than not using one tho isnt it?

or do you not? let me guess, do you use linux? :)

[Sirber]

I'm on windows and no AV. Learn to be carefull ;)

[Sharktooth]

i do not use AVs, no spyware removers and no other useless resident software that hog the system.

[Carpo]

i use all the above but remove the option for them all to be resident in mem - just run them when i want them to run :D but anyway i have never had NOD32 do that with my encodes stat file and its set to updat every day

[Eretria-chan]

You're all paranoid, I say! An anti-virus program is a GOOD thing to have. If you're so paranoid about it consuming resources, then why not disable automatic scanning? Myself, I always enable those things. I see no performance hit anyway.

[tomos]

nod32 is light on resources and i've never seen a performance hit from it. compared to norton anyway :D

[videomixer9]

There's awful lot of worms and viruses detected in open source software and related things lately. I smell antivirus industry fighting open source by doing this on purpose, after all they are also on the closed source side and with patent owners. nsis, upx, xvid or even 7zip was shown as virus when I checked them online, ffdshow too. It seriously started pissing me, especially seeing people trust these false reports and think there's really viruses in the software, and by targetting open source they get people to easily not trust in open source anymore, easy concept.

Antivirus is so much bloat nowadays, and to sell licenses for longer support the antivirus companies would go any way I think. After all their goal isn't protection, it's profit. Writing worms is just as much as of a pure profit buisness as antivirus is, and when people never see their antivirus find anything they'll wonder why they even got it, so they just randomly detect worms everywhere and best let companies pay them for detecting random virii in open source or other things that's not in their favor.

So much for paranoia and wild theories for today :P

[Sharktooth]

the only antivirus i used was clam32 (open source) but i removed it as well coz i never really needed an antivirus...

[Blue_MiSfit]

AVG Free is sweet... very thin and frequently updated. 6 MB of memory for real time scanning of anything that gets opened up is a small price to pay.

~MiSfit

[check]

There's awful lot of worms and viruses detected in open source software and related things lately.
A large portion of this was surely caused by AVG accidentally including a signature that matched to any program using the NSIS 1.17 (from my dim memory) installer about a month ago. It was fixed inside of two days, but I remember a constant stream of people coming into IRC over those days asking about a supposed virus in some software I help out with. fun times :p

re: AVG free, I used to use it, when I switched over to NOD32 it immediately picked up two worms sitting in the disused hulk of my archives! Ever since then I've stuck to NOD32 :)

[bob0r]

Can they be used for fishing?

[Oline 61]

Depends on what you're fishin' for.