06 Jul 2006
A faulty update has caused Symantec to incorrectly detect the Zlob Trojan in the legitimate open source Nullsoft Scriptable Install System (NSIS) tool.
A Symantec spokesman did not immediately return a phone call from vnunet.com seeking additional information.
The false positives appear to be caused by a faulty update of Symantec's antivirus signatures distributed on 1 July. According to user comments, the problem was repaired on 3 July.
The faulty detection caused the antivirus software to remove or quarantine the allegedly infected files. The problems only occurred with version 2.17 of NSIS, not the current version 2.18.
NSIS offers a standard way for software developers to have their products installed on a system. It is used by numerous applications including the WinAmp media player, Kaspersky antivirus software and the game Settlers II.
Last week's error is the fourth time that Symantec has mislabelled NSIS as spyware, according to an overview on the project's web page.
NSIS gets mislabelled as spyware on a regular basis, and Microsoft tops the list of offenders. The software giant's anti-spyware software has failed to recognise the code on five occasions.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
My multi- national Partner client has charged me exclusively...
Senior IT Operations Engineer -MCSE, IIS7/7.5, SAN, CDN...
I have an urgent requirement for short term contract...
User Interface Developer x 1/2 - Leading Organisation...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
NSIS
I tried to uninstall NSIS twice and it caused all kinds of problems, unable to uninstall.
Posted by: Bill donaghy 22 Nov 2006
NSIS is spyware, malware!!!
How can you label it as anything else? Worried about your name being assiciated with spyware? I think there is a valid reason it is caught and labled that way. Liars!!! I got rid if NSIS from my system and it wasn't easy. It was almost like it was made to be hard to remove. Imagine that....Not spyware???!!!! I'm laughing at you.
Posted by: Truth 02 Nov 2006
... and how would you rate 'NSIS Media Advertisment' pop unders?
You evaluate 'NSIS' as not malicious. How would you rate these pop-ups/pop-unders appearing on a huge number of PCs lately? I found new software recently installed on my PC called 'NSIS Media Extension' ... uninstall duplicates it on restart, system restore to an earlier date does even increase number of duplications.
Posted by: Georg Fritscher 16 Oct 2006