Mcafee and nsis installer

[neelakurdinger]

I hope this topic is relevant to this community. However if there are developers out here who works with nsis installer please tell me how does it reacts with Mcafee Labs. For me even an empty installer gets detected as a threat. I have done virus total scan and results are as follows

https://www.virustotal.com/en/file/755f5eb13371bf03b5e8d4398869e0b1a19b189b7214d8cfe516bda9b951748b/analysis/1412582177/


Anyone can clearly see that all other virus guards are fine but mcafee detects the empty installer as BehavesLike.Win32.Dropper.nh. I really would like to know your opinion about what action should be taken to prevent this from happening

 

[John Connor]

You get false positives with Virustotal. If everything else passed then I would bet it's a safe file.

The file is exp.exe? Here's info. http://www.bleepingcomputer.com/startups/exp.exe-8065.html

Not sure what to think now.

Here's the download. http://nsis.sourceforge.net/Download It isn't exp.exe.

 

[neelakurdinger]

You get false positives with Virustotal. If everything else passed then I would bet it's a safe file.

The file is exp.exe? Here's info. http://www.bleepingcomputer.com/startups/exp.exe-8065.html

Not sure what to think now.

Here's the download. http://nsis.sourceforge.net/Download It isn't exp.exe.

No the file is something we have created using nsis installer and it's empty but forget about that.

We have downloaded official nsis installer from http://sourceforge.net/projects/nsis/files/NSIS%203%20Pre-release/3.0b1/nsis-3.0b1-setup.exe/download?use_mirror=switch&download=

Even the installer itself detects as a threat. here is the virus total analysis >
https://www.virustotal.com/en/file/7e5c203584c538205b345d91249fca8af03a8cf186c8c870a86374812d8103a5/analysis/

Also we have a thread on community of mcafee as well.
https://community.mcafee.com/message/355351#355351