UBCD4Win Forums: Panda Antivirus flags NIRCMD.EXE as virus - UBCD4Win Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Panda Antivirus flags NIRCMD.EXE as virus

#1 User is offline   netbjarne Icon

  • Newbie
  • Pip
    • Group: Members
    • Posts: 6
    • Joined: 19-February 08

    Posted 19 February 2008 - 04:27 AM

    I had problems with Panda Antivirus 2008 (several different versions) flagging NIRCMD.EXE as virus, see below:

    Tracking program detected: Application/NirCmd.A
    Location: C:\UBCD4Win\BartPE\I386\SYSTEM32\NIRCMD.EXE

    As NIRCMD.EXE seems to be part of the "core files", the bootcd won't build if the antivirus software removes it. Compared to false positives generated by plugins that if not needed can be disabled and removed, this is a bit more severe. I had to remove the antivirus software entirely as the corporate version didn't allow me to ignore files.

    If NIRCMD.EXE is not a threat it would be cool to have Panda remove it from their lists. If it is a threat it would be nice if it could be removed from ubcd4win so it not longer triggers errors.

    Update: Using UBCD4WIN 3.11

    Best regards
    netbjarne

    This post has been edited by netbjarne: 19 February 2008 - 04:32 AM

    0

    #2 User is offline   bengt Icon

    • Skeptic
    • PipPipPipPipPipPip
      • Group: Donator/Beta Tester
      • Posts: 1,261
      • Joined: 16-December 05
      • Gender:Male
      • Location:Bork, bork, bork

      Posted 19 February 2008 - 05:44 AM

      there are no malware of any kind in this project.
      report the false positive to Panda Antivirus

      http://www.ubcd4win.com/howto.htm

      and by the way: it does not flag it as a virus, it actually says: Tracking program detected
      which it is not: http://www.nirsoft.n...ils/nircmd.html
      0

      #3 User is offline   cdob Icon

      • Special Guest
      • PipPipPipPipPipPip
        • Group: Moderator & Development
        • Posts: 1,431
        • Joined: 19-October 05

        Posted 19 February 2008 - 05:46 AM

        View Postnetbjarne, on Feb 19 2008, 04:27 AM, said:

        I had problems with Panda Antivirus 2008 (several different versions) flagging NIRCMD.EXE as virus, see below:

        Tracking program detected

        No, that's not flagged as virus. That's flagged as a tracking program.

        http://www.pandasecu...da=particulares
        NirCmd.A belongs to the category of Potentially Unwanted Programs

        Quote

        If NIRCMD.EXE is not a threat it would be cool to have Panda remove it from their lists.

        http://www.nirsoft.n...ils/nircmd.html
        NirCmd is several years in usage. There is no virus, trojaner or similar.

        NirCmd is a powerful tool.
        A powerful tool may do powerful things. Remember 'format c:' is a powerful tool too.
        Format.com maybe a Potentially Unwanted Program too.

        Ask Panda about enhanced security:
        disable keyboard, disable mice, disable monitor and shutdown PC ;)

        What about:
        Panda AntiVirus is a Potentially Unwanted Program


        Quote

        If it is a threat it would be nice if it could be removed from ubcd4win so it not longer triggers errors.

        Yes, removing could be option.

        Try lauch Builder, select run. Do you get a error message?
        Next press F5 to build ISO anyway.


        Another option:
        Or build a virtual machine. Run Builder in virtual machine.
        0

        #4 User is offline   netbjarne Icon

        • Newbie
        • Pip
          • Group: Members
          • Posts: 6
          • Joined: 19-February 08

          Post icon  Posted 21 February 2008 - 09:14 AM

          Thank you for clearifying things - (and I'm sorry for mixing virus/tracking programs :closedeyes:)

          Indeed nircmd looks very useful, too bad Panda "Client Shield" chooses to remove it. My workaround was to replace Panda Antivirus with different edition (a end user type instead of the corporate version) - the other version allows me to actually decide what I wan't to do (ignore) when nircmd.exe is detected.

          Best regards
          netbjarne
          0

          Page 1 of 1
          • You cannot start a new topic
          • You cannot reply to this topic

          1 User(s) are reading this topic
          0 members, 1 guests, 0 anonymous users