False positive in Mail Passview by Nirsoft??

Viruses and worms
1

Got this file from http://www.nirsoft.net/utils/mailpv.html

The link for it is above (mailpv_setup.exe)

And Avast picks it up as Win32:MailPassView-G [Tool]

Did a scan @ virustotal and it brings this up:

AntiVir - - DR/PSW.MailPassView.N
Authentium - - -
Avast - - -
AVG - - HackTool.FAI
BitDefender - - Virtool.12848
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - Trojan.Inject.3744
eSafe - - Suspicious File
eTrust-Vet - - -
Ewido - - -
F-Prot - - -
F-Secure - - PSWTool.Win32.MailPassView.n
Fortinet - - HackerTool/MailPassView
GData - - Virtool.12848
Ikarus - - Downloader.PSW.MailPassView.N
K7AntiVirus - - not-a-virus:PSWTool.Win32.MailPassView.n
Kaspersky - - not-a-virus:PSWTool.Win32.MailPassView.n
McAfee - - potentially unwanted program Generic PUP
Microsoft - - -
NOD32 - - -
Norman - - -
Panda - - HackTool/MailPassView.F
PCTools - - -
Rising - - -
SecureWeb-Gateway - - Trojan.Dropper.PSW.MailPassView.N
Sophos - - -
Sunbelt - - Trojan-PSW.MailPassView.N
Symantec - - Hacktool
TheHacker - - -
TrendMicro - - -
VBA32 - - -
ViRobot - - -
VirusBuster - - -

2

Well when you see the[Tool] suffix on an avast detection it is not really a false positive as a tool can be used for good and evil, if you installed and are aware of the functioning of the tool is isn’t a problem. You would have to exclude it from future scans though or avast would alert again.

3

Hmm ok, well AFAIK, all it does istell you your passwords, (if you forget them), thats it

4

I have some tools like that which are also detected and I locate them in a folder for such tools that would otherwise be detected and exclude that folder and its contents. c:\z-excludes* (imaginative I know) the z- is to ensure it doesn’t show in the middle of the windows explorer folder display but out of the way at the end.