#119 closed Bug / Defect ( notabug )
Kaspersky thinks OpenVPN uninstaller is a rootkit
| Reported by: | Samuli Seppänen | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | beta 2.3 |
| Component: | Generic / unclassified | Version: | OpenVPN 2.2-beta / 2.2-RC (Community Ed) |
| Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
| Cc: |
Description
Kaspersky Internet Security 2011
thinks OpenVPN uninstaller is a rootkit.
Change History (3)
comment:1 Changed 14 years ago by
| Resolution: | → notabug |
|---|---|
| Status: | new → closed |
comment:2 Changed 14 years ago by
The temporary uninstaller executable (AU_.exe) triggers this. Kaspersky's
"Proactive Defense"
component detects it as a
"PDM.Rootshell"
. It seems the uninstaller is not blocked from doing anything, though.
comment:3 Changed 14 years ago by
Tested with OpenVPN 2.2-RC2 uninstaller. Should be reproducible with 2.1.x as NSIS components are the same.
This is not an OpenVPN or Kaspersky-specific issue, it's related to the NSIS uninstaller:
Various other links to same issue:
Ironically Kaspersky itself uses/has used NSIS for it's own installers: