Trojan (false positive?)

[dluby]

Hi Mouser,

All of a sudden McAfee is saying the C:\Program Files\LaunchBarCommander\Tools\Nircmd\nircmd.exe (it has a modified date of 26/05/2009) is a trojan - see attachment.



Is this a false positive?  The McAfee version number is 4.5.0.1852 and I believe the definition file was updated today.

[app103]

Yes, it is a false positive. Seems a few antivirus companies have heuristics that bounce back and forth between liking and not liking that file. It's been going on for quite a long time.

In case you are unaware of the purpose of that file, there is detailed information about what the file does/can do here: http://www.nirsoft.net/utils/nircmd.html

Basically, it gives you more features and functionality to play with, more things you can create shortcuts for in LaunchBar Commander. It's a power users tool.

[mouser]

Exactly what app says.

If you are nervous you can always let McAfee delete the file without any ill effect - it's only used if you use the Nircommand menu in your launchbar which adds commands for doing things like restarting computer or starting screensaver, etc.