False Positive 2 files NordVPN Start.exe and

Viruses and worms
1

Hi there:)

Two false positives “C:\Program Files\NordVPN\NordVPN Client.exe” and NordVPN Start.exe in latest Avast definitions.

Virus message:- Threat: Win32:Dropper-OEI [Drp]

Virus Total seems fine except Avast… NordVPN Start (1/57) NordVPN Client.exe (1/57) also!

I have had Nord VPN for a year now and no warnings! In case the file was infected, I double checked against an earlier offline backup of the same file and the other file has the same FP.

I contacted Nord customer support and they feel that it is an FP also, as they sent me a link to re-download their software which again showed the same FP! I believe they will also contact you re this.

Best wishes,

Howard

2

Think you are right: http://www.herdprotect.com/nordvpn-client.exe-f4757cae6369dfd440a3fdded5c130a47358620d.aspx

pol

3

Hopefully they will sort it out the next virus definition update:)

I have never heard of herdprotect before. I have just visited their site and have downloaded it to try it out…

4

It really is a fine service, this herdprotect - you are protected by whoever else is being protected.

pol

5

Having tried herdprotect for a few days I agree that it is very good. There are a few things that I would like to see including integration with Windows Explorer and an option to delete items in quarantine! Perhaps also an option to exclude potentially unwanted programs from scans!

I find the Nord FP annoying as it seems noone has bothered to check it out and change it in definitions, so it is just a waste of time my posting it here! I was thinking of upgrading Avast but am now having second thoughts!

I tried including the relevant files in exclusions, but it still detects them although it should not do so!

Howie:)

6

You should report false positives through the form:
https://www.avast.com/contact-form.php?subject=VIRUS-FILE

7

Hi Eddy:)

I tried to send the file there already but got this message:-

413 Request Entity Too Large

8

have you tried here https://support.avast.com/ > avast virus lab

9

Although they are very rare there are instances where the browser is at fault.
Try it with another browser and see if it makes a change.

What is the file size you are trying to upload ?

10

Hi Eddy the file size is 16.1 mb so small. I only use Firefox currently!

11

I just tried that link now and was able to send both files! There was no confirmation message that the files had been sent. However I assume that all was fine as there was no error message and the files no longer showed. Thanks for that!

Howard