Hirens bootable cd 15.0 and MSE

[xxxdannyxxx]

Hi Guys

I've just updated to version 15.0 of Hirens bootable cd and its sent MSE wild. A total of 7 hits from the 15.0 zip file download. Anyone else had this with the new version. I used my normal link for the download - Download Hiren

Danny

 

[Bongo]

Just download it MSE did nothing.
Jerry

 

[boohbah]

the last time i downloaded hirens ,it got sent to quarantine. i never used it after that.

 

[xxxdannyxxx]

Just download it MSE did nothing.
Jerry

Have you tried a full scan on the partition its on. It only flashed up as I began unpacking the zip folder with YUMI to add it to the usb stick.

All in the Hirens iso

 

[kado897]

Malwarebytes PRO blocked the download for me. I eventually got pointed to this site after emailing Hirens. Index of /hirensbootcd/

 

[xxxdannyxxx]

Malwarebytes PRO blocked the download for me. I eventually got pointed to this site after emailing Hirens. Index of /hirensbootcd/

Will try that one thanks Keith

 

[xxxdannyxxx]

Ok MSE reported the same 7 threats on the link you gave me aswell Keith. Not sure what's going on here at the moment so going to go back to 14.1 until some answers are available.

 

[kado897]

It's some time since I downloaded my copy. It may be worth giving them a call on [email protected]. That's what I did when I had a problem.

 

[xxxdannyxxx]

It's some time since I downloaded my copy. It may be worth giving them a call on [email protected]. That's what I did when I had a problem.

Think I will do that Keith. I've never had a problem with it before today but this has worried me more than just a little. Seven hits is more than just a False Positive in my opinion.
I will also sent the results to the MSE team to see what they have to say.

Danny

 

[kado897]

Good idea Danny. Keep us posted there are a lot of members here that use Hirens.

 

[Bongo]

Just download it MSE did nothing.
Jerry

Have you tried a full scan on the partition its on. It only flashed up as I began unpacking the zip folder with YUMI to add it to the usb stick.

All in the Hirens iso

View attachment 183523
View attachment 183524

No I did not. But I did after seeing that I did a scan and got the same as you. It's been removed now.
Jerry

 

[mjf]

NIS 2011 has quarantined "Hbcdcustomizer.exe" only for some time now including V15.0. I don't use it so leave it out.
Malwarebytes doesn't get bothered with anything on the Hirens CD.

Either NIS and Malwarebytes are providing poor protection or MSE is a bit heavy handed with false positives.

 

[A Guy]

It's the HBCDCustomizer.exe. Virus total gets 26/43 alerting.

VirusTotal - Free Online Virus, Malware and URL Scanner

A Guy

 

[kado897]

Actually I just realized the last one I downloaded was 14.1. I think I will stick with that until this is sorted and won't recommend it to anyone.

 

[Jacee]

*Flags* are being picked up by your Anti-virus. This is because Hirens contains some tools that are not 'freeware'... copies of retail applications. Some of these tools may be abandoned-ware, but you also needed a full license to run them.

 

[Sub Styler]

It also has tools that would be picked up by the "PUP" or potentially unwanted programs section as they can directly bypass some windows security measures, the reported "Trojans" are a bit more worrying though.

 

[xxxdannyxxx]

I have received an email this evening from Hirens basically stating as expected that the zip contains no malware and the results are FP's. Nothing as yet from the MSE guys though.

Danny

 

[xxxdannyxxx]

I have received an email this evening from Hirens basically stating as expected that the zip contains no malware and the results are FP's. Nothing as yet from the MSE guys though.

Danny

 

[kado897]

Thanks Danny.

 

[mjf]

If you go to the Hiren & Pankaj's Homepage the majority of software is stated as freeware.
Listed as Shareware:
1) Image for Windows 2.66 - whatever that is.
2) Total Commander 7.56a
3) Atlantis Word Processor 1.6.5.5 - why bother?
4) Disk Genius 3.2 - could be quite useful and still relevant
Then labeled $-Windows symbol (whatever that means)
* Mini XP - my understanding that this basic environment times out like a pe disk.
Then labeled $-MSDOS
* Dos Tools

From my point of view the 2 items labeled $-MS do nothing but facilitate the maintenance of current legal paid MS OSs. But are they legal?? Does MS care??
You could build a Windows 7 pe disk to substitute for the mini XP and integrate the tools. Legal, but would take quite a bit of effort.

I can see no sinister reason for malware to be embedded in these tools.
I remain puzzled.