[netbjarne]

I had problems with Panda Antivirus 2008 (several different versions) flagging NIRCMD.EXE as virus, see below:

Tracking program detected: Application/NirCmd.A
Location: C:\UBCD4Win\BartPE\I386\SYSTEM32\NIRCMD.EXE

As NIRCMD.EXE seems to be part of the "core files", the bootcd won't build if the antivirus software removes it. Compared to false positives generated by plugins that if not needed can be disabled and removed, this is a bit more severe. I had to remove the antivirus software entirely as the corporate version didn't allow me to ignore files.

If NIRCMD.EXE is not a threat it would be cool to have Panda remove it from their lists. If it is a threat it would be nice if it could be removed from ubcd4win so it not longer triggers errors.

Update: Using UBCD4WIN 3.11

Best regards
netbjarne

This post has been edited by netbjarne: 19 February 2008 - 04:32 AM

[bengt]

there are no malware of any kind in this project.
report the false positive to Panda Antivirus

http://www.ubcd4win.com/howto.htm

and by the way: it does not flag it as a virus, it actually says: Tracking program detected
which it is not: http://www.nirsoft.n...ils/nircmd.html

[cdob]

netbjarne, on Feb 19 2008, 04:27 AM, said:

I had problems with Panda Antivirus 2008 (several different versions) flagging NIRCMD.EXE as virus, see below:

Tracking program detected

No, that's not flagged as virus. That's flagged as a tracking program.

http://www.pandasecu...da=particulares
NirCmd.A belongs to the category of Potentially Unwanted Programs

Quote

If NIRCMD.EXE is not a threat it would be cool to have Panda remove it from their lists.

http://www.nirsoft.n...ils/nircmd.html
NirCmd is several years in usage. There is no virus, trojaner or similar.

NirCmd is a powerful tool.
A powerful tool may do powerful things. Remember 'format c:' is a powerful tool too.
Format.com maybe a Potentially Unwanted Program too.

Ask Panda about enhanced security:
disable keyboard, disable mice, disable monitor and shutdown PC

What about:
Panda AntiVirus is a Potentially Unwanted Program

Quote

If it is a threat it would be nice if it could be removed from ubcd4win so it not longer triggers errors.

Yes, removing could be option.

Try lauch Builder, select run. Do you get a error message?
Next press F5 to build ISO anyway.


Another option:
Or build a virtual machine. Run Builder in virtual machine.

[netbjarne]

Thank you for clearifying things - (and I'm sorry for mixing virus/tracking programs )

Indeed nircmd looks very useful, too bad Panda "Client Shield" chooses to remove it. My workaround was to replace Panda Antivirus with different edition (a end user type instead of the corporate version) - the other version allows me to actually decide what I wan't to do (ignore) when nircmd.exe is detected.

Best regards
netbjarne