{RESOLVED] Is No$Zoomer Malware?

[ehuonder]

ADMINS. If this type of question is not allowed, please delete with my apologies. I re-read the Guidelines and Rules, and thought that I was OK posting this.

I have No$GBA set up with GameEx. I've been looking for a way to make the screen size larger for DS games. I saw in a post by frequency that he used NO$ZOOMER. I downloaded this, scanned it with my anti-virus software (AVG-free), and it passed. But when I run NO$ZOOMER, AVG complains that its MALWARE. The details are as follows:

*AVG details:

5 processes terminated

1 file deleted

0 registry keys deleted

Processes terminated:

*NO$GBA.EXE

Process ID: 3712

Full path: ...

Characteristics:

Process memory is compromised

Injects code

The executable is packed

Executes from the filesystem

Is terminated

Visible window

*NO$ZOOMER.EXE

Process ID: 984

Full Path: ...

Characteristics:

Injects code

Small executable

Executes from the filesystem

Spawns other processes

Is terminated

Visible Window

*CALMAIN.exe

Process ID: 3120

Full Path: ...

Characteristics:

System service

Window not visible

Probably survives reboot

Executes from the filesystem

Is terminated

*nvsvc32.exe

Process ID: 2740

Full Path: ...

Characteristics:

Executes from the WIndows directory

System service

Window not visible

Probably survives reboot

Spawns other processes

*LSSrvc.exe

Process ID: 2152

Full Path: ...

Characteristics:

System service

Window not visible

Probably survives reboot

Executes from the filesystem

Is terminated

*Files deleted:

*NO$ZOOMER.EXE

The descriptions might actually be describing the program correctly and its fine, or it could be malware...

So, I guess my question is, is AVG being too cautious? Do I have a malware infested version? or are all versions of NO$ZOOMER malware?

[edit] OR... should I just be using DeSmuME instead?

[Kustom Kid]

From what I've found it doesn't appear to be malicious.. I've gotten some weird false positives from AVG myself. If you turn off heuristic scanning it should fix the problem, but it may leave you open to other problems.

[mesk]

I use no zoomer with no malware problems. most likely it is avg giving yet another false positive.do yourself a favor and get avast free antivirus.that along with common sense has kept me virus\malware\spyware free for over 2 years

[Adultery]

+1 for Avast. It's been good to me too.

AVG is finicky, and I use NO$ZOOMER and it's not malicious. AVG might pick it up because it's tweaking another EXE.

[ehuonder]

Thanks for the replies! I thought that AVG might be giving a false positive. I'll have to look into Avast.

[fRequEnCy]

I also agree with the others about Avast. I highly recommend it. I made the switch from AVG and haven't switched back and have never never never had an infection. But just because we've had success with NO$ZOOMER doesn't mean it couldn't possibly be infected. Depends on your source. I would run the file through Virus Total to see what results turn up. It's a good way to get different results from different Anti-virus Engines.

[Draco1962]

"No, Honey, I'm not infected.. I just take this penicillin to, uh, um, clear up my acne! Yeah, that's the ticket!"

Oops! Wrong thread/forum/website!

Now where is that damned UNDO button...

*nvsvc32.exe

Process ID: 2740

Full Path: ...

Characteristics:

Executes from the WIndows directory

System service

Window not visible

Probably survives reboot

Spawns other processes

I like how AVG tseems to think that nvsvc32.exe is malware. it is actually part of the nVidia driver helper.

Edited August 13, 2012 by Draco1962
This thread is now marked as Resolved and has been closed. If the problem re-occurs, please start a new thread.