1  |   Order by index

Jun 28, 2004, 6:04pm

A user has recently voiced his concern regarding the findings of a spyware detection utility known as PestPatrol. The software has claimed that the ChatRelayBot’s NSIS uninstaller contains a keylogger known as ‘Ardamax Keylogger 1’.

I have checked, and can confirm that PestPatrol does “suspect” the uninstaller of having a keylogger, even after I have locally rebuilt the installer. I can only assume that PestPatrol’s claim is a false positive, since Ad-Aware and SpyBOT do not find any problems with my generated uninstaller.

Please note that PestPatrol is only capable of saying the uninstaller is “suspected” to have the keylogger; it cannot 100% prove that the keylogger is present. As Ad-Aware and SpyBOT have also scanned the file without finding anything, one can only conclude that the PestPatrol software is raising a false alarm.

If there are still concerns, NSIS is an open-source system and their source code may be viewed directly: http://cvs.sourceforge.net/viewcvs.py/nsis/NSIS/

Jun 28, 2004, 9:22pm

False positives have been detected earlier also in SpyBot: 3DCanvas
stood also on SpyBot's black list, but had no spyware at all. So
double check, not all that is called malicious is malicious :)

Alex


On 28 Jun 2004 16:04:12 -0400, "tony m"
[View Quote] >A user has recently voiced his concern regarding the findings of a spyware detection utility known as PestPatrol. The software has claimed that the ChatRelayBot’s NSIS uninstaller contains a keylogger known as ‘Ardamax Keylogger 1’.
>
>I have checked, and can confirm that PestPatrol does “suspect” the uninstaller of having a keylogger, even after I have locally rebuilt the installer. I can only assume that PestPatrol’s claim is a false positive, since Ad-Aware and SpyBOT do not find any problems with my generated uninstaller.
>
>Please note that PestPatrol is only capable of saying the uninstaller is “suspected” to have the keylogger; it cannot 100% prove that the keylogger is present. As Ad-Aware and SpyBOT have also scanned the file without finding anything, one can only conclude that the PestPatrol software is raising a false alarm.
>
>If there are still concerns, NSIS is an open-source system and their source code may be viewed directly: http://cvs.sourceforge.net/viewcvs.py/nsis/NSIS/

Jul 4, 2004, 9:29am

The ChatRelayBot now uses a different installer package, which resolves the issue with PestPatrol.

Happy 4th of July!

[View Quote]

1  |   Order by index