Virus in CNET download

[dwreid]

I used the CNET download to obtain a copy of the software. ESET anti-virus reports a virus embedded in the CNET download/installer. I thought someone might like to know.

[Bhikkhu Pesala]

Tell someone at ESET — they are the one's who need to know about false positives.

Get real — are CNET going to host files with viruses or trojans? Check the file with another virus program or an online virus checker.

[Frovingslosh]

An alternate suggestion would be to not always assume a false positive when downloading from a major site, but consider that it could be a false positive and download another copy of the same version from another site, then compare the files (either byte by byte or by md5 checksums). If the files do not match then it is likely that you have actually got a real virus and the warnings should be issued. If they do match it is all the more likely that you are seeing a false positive.

A different scanner failing to catch the virus is not proof of a false positive. Many scanners take quite a while to become aware of some viruses. I've had some files that I suspected were infected but AVG reported were virus free. Over 8 months later AVG suddenly decided that those files (which I had saved away but never used) were indeed infected.

[derniwi]

Hi,

it is also possible to check the MD5 hash. Irfan has it always on the download page, and you can check this against the downloaded file.
There are some free tools in the internet just for this.

Currently cnet does not appear as a mirror for IrfanView on his page. I know sometimes mirror providers for software added some small tools liker toolbars or the babylon translator and installed this automatically on the computer. But I do not know if this is still common practice because I check the files I've downloaded.

Regards
Nils