Forum Home
Press F1
 
Thread ID: 121932 2011-11-22 03:11:00 Core Temp malware - Nod32 going bezerk Gobe1 (6290) Press F1
Post ID Timestamp Content User
1244788 2011-11-22 03:11:00 HI
I used to use this to monitor cpu temps but Nod32 doesnt like it anymore
Do you think it might be a false positive?
I downloaded speedfan instead and this is running ok
Gobe1 (6290)
1244789 2011-11-22 03:59:00 Could be a false positive (most likely) OR it could be that the file was actually infected somehow.

Would help to know what virus Nod32 is detecting it as.

You could upload the file to www.virustotal.com, If nothing else reports virus, it's probably just a false positive.
Agent_24 (57)
1244790 2011-11-22 04:06:00 Tell the guys who made that program, and NOD the name of the file and what NOD picks it up as. Either will probably do an update to fix it Speedy Gonzales (78)
1244791 2011-11-22 04:18:00 Here is the screen shot

Pc wants to reboot becasue of it....never had that before
Gobe1 (6290)
1244792 2011-11-22 04:24:00 AV usually ask for reboot if the file is in use\locked at the time, which makes sense if you were executing it or it hadn't finished downloading.

In any case it's not a virus, but as the name says "potentially unwanted application" - this usually means things like crappy toolbars which you may or may not want (but aren't viruses)

If it's an installer, it's probably one which gives you the option to install some sponsor program. If that is the case, then it's likely that is what Nod32 is alerting you about.


EDIT:

Seems the place you are downloading from might be the cause.
www.ehow.com

Looks like some kind of adware type thing basically.


In fact it says on CoreTemp site "Clicking this Download button starts InstallIQ™, which manages your installation."

Click the "more downloads" button below that, to get a standalone version without the InstallIQ crap.
Agent_24 (57)
1244793 2011-11-22 04:50:00 oh yeah, thanks Agent, i think youve nailed it Gobe1 (6290)
1244794 2011-11-22 05:33:00 They have actually put detected spyware in the install. Even going to the Home page of CoreTemp (www.alcpu.com), and downloading from there the actual installer is the problem.
From their home page download:

3383

That file highlighted is also the one that my Nod32 went nuts about as well when trying it on a workshop PC.

The company makes money by suggesting other companies' applications to InstallIQ users.
wainuitech (129)
1244795 2011-11-22 08:44:00 you could create an exception in NOD to ignore core temp.. ronyville (10611)
1244796 2011-11-22 08:49:00 You could but it's not CoreTemp itself that is the problem, it's the InstallIQ crap it came bundled with. Agent_24 (57)
1244797 2011-11-22 08:54:00 I got core temp installed but that didnt come with any IQ crap. ronyville (10611)
1 2