Virus warning in Eroiica dll

[rvdmark]

The eroiica plugin file erfdsi.dll (version 5.0.39.1) gives a virus warning in Norman anti-virus scan. It is flagged as the Trojan W32/Renos.CNU. From what I can find online this is a exploit meant to make you buy a rogue anti-virus software called SpyFalcon. So far I'm inclined to think it's a false scan (another anti-virus program didn't recognise anything), but I was wondering if others have detected this?

It doesn't seem to add the registry values various websites say the virus ought to do, but still. I'm going to write to Norman too, to see what they think of it.

[Jan Rysavy]

It's not the first time we have false positive reports from Norton anti-virus users.

Also Norton 360 shell extension (buShell.dll) looks pretty unstable based on received bug reports.

I must really recommend NOD32 anti-virus (note: we are not related to ESET, we are just satisfied customers).

[rvdmark]

Actually it's Norman anti-virus (http://www.norman.com/), not Norton. We need that one for the Firebreak Novell server anti-virus program actually. I uploaded the dll at Norman for a check, as a suspected false positive file. Hopefully that will solve it.

[Jan Rysavy]

Norman: you are right, I'm reading too fast.

Thank you for your effort!