May 9, 2007

Adobe Flash player install triggers virus alerts

I installed Adobe's flash player 6 on my pc tonight and was surprised to see Comodo Antivirus kick in with a "Not-a-virus:RiskTool.Win32.PsKill.q" for the nsprocess.dll file included as part of the install - presumably to kill any previous installs currently running. I've seen things like this with Symantec Antivirus and pskill from sysinternals before but not with Flash Player!
I submitted the file to virustotal.com and got the following results.



AntivirusVersionUpdateResult
AhnLab-V32007.5.10.005.09.2007Win-Trojan/ProcKill.4096.B
AntiVir7.4.0.1505.09.2007no virus found
Authentium4.93.805.08.2007no virus found
Avast4.7.997.005.09.2007no virus found
AVG7.5.0.46705.09.2007no virus found
BitDefender7.205.10.2007no virus found
CAT-QuickHeal9.0005.09.2007no virus found
ClamAVdevel-2007041605.09.2007no virus found
DrWeb4.3305.09.2007no virus found
eSafe7.0.15.005.08.2007no virus found
eTrust-Vet30.7.362205.09.2007no virus found
Ewido4.005.09.2007no virus found
FileAdvisor105.10.2007No threat detected
Fortinet2.85.0.005.09.2007no virus found
F-Prot4.3.2.4805.09.2007W32/Trojan.RZG
F-Secure6.70.13030.005.10.2007no virus found
IkarusT3.1.1.705.09.2007no virus found
Kaspersky4.0.2.2405.10.2007no virus found
McAfee502705.09.2007potentially unwanted program Generic PUP
Microsoft1.250305.09.2007no virus found
NOD32v2225505.09.2007no virus found
Norman5.80.0205.09.2007no virus found
Panda9.0.0.405.09.2007no virus found
Prevx1V205.10.2007no virus found
Sophos4.17.005.08.2007no virus found
Sunbelt2.2.907.005.05.2007no virus found
Symantec1005.10.2007no virus found
TheHacker6.1.6.11205.10.2007Trojan/KillProc.p
VBA323.12.005.09.2007no virus found
VirusBuster4.3.7:905.09.2007no virus found
Webwasher-Gateway6.0.105.09.2007no virus found

That is 5 antivirus products that presumably block or intefere with Flash from being installed.

Posted by Andy at May 9, 2007 8:54 PM