Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Win32/Toolbar.Widgi installed by PSI

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
aho45547 Win32/Toolbar.Widgi installed by PSI
Member 7th Feb, 2013 16:27
Ranking: 0
Posts: 2
User Since: 7th Feb, 2013
System Score: N/A
Location: DE
Today my ESET NOD32 Virus-Scanner blocked the access to:

C:\Windows\Installer\{F24F876B-7D71-4BD6-88E9-614D 3BB84228}\ARPPRODUCTICON.exe

Win32/Toolbar.Widgi

Opened by: C:\Program Files (x86)\Secunia\PSI\psia.exe

The history in the PSI Gui is empty.

Does anyone know how this can happen? Maybe an update delivered this, does anyone know this behaviour?






ddmarshall RE: Win32/Toolbar.Widgi installed by PSI
Dedicated Contributor 7th Feb, 2013 22:48
Score: 1209
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
I'd scan it with something else to test for a false positive.

The ARPPRODUCTICON.exe file is used by InstallShield. The numerical string is the product code. If you open that folder, you may be able to see what the product is. The easiest way to get to the hidden Installer folder is to type c:\windows\installer in the start search box and press enter. Alternatively, look for it in the Registry under HKLM\Software\Microsoft\Windows\CurrentVersion\Uni nstall.

It might not be an update. I just ran a trace of a PSI scan and saw it was opening these files during the scan.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
E.Jeppesen RE: Win32/Toolbar.Widgi installed by PSI
Secunia Official 8th Feb, 2013 11:15
Score: 220
Posts: 618
User Since: 24th Nov 2008
System Score: N/A
Location: Copenhagen, DK
I would also suggest doing a more thorough scan. Please see this previous thread on a similar topic:
http://secunia.com/community/forum/thread/show/137...
aho45547 RE: Win32/Toolbar.Widgi installed by PSI
Member 8th Feb, 2013 15:34
Score: 0
Posts: 2
User Since: 7th Feb 2013
System Score: N/A
Location: DE
I scanned the files again and nothing happend > no virus or unwanted app found...
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability