Page 1 of 1

NSIS.Library.RegTool.v3.{EA8CF6CC-F872-487D-A6CE-FF65D59AF322}.exe

Posted: 2019-07-11 17:40
by eddierowe
After upgrading to the most recent release, one of our PCs appears to have this executable installed that has been taken down a peg by our next generation antivirus. Aside from being confused as to why one system has it and the test system where I install all upgrades does not have it, is there a web page that documents this? I see lots of chatter from years ago about this filename, but without the same odd GUID type of the filename).

Re: NSIS.Library.RegTool.v3.{EA8CF6CC-F872-487D-A6CE-FF65D59AF322}.exe

Posted: 2019-07-11 18:29
by botg
There's no way to put this politely, so I'll be blunt: Your so-called "next generation antivirus" is expensive bullshit. Snake-oil not working? Just increase the dose.

A quick search in each and every of the many Internet search engines people might have as favorite shows that this file is a component of the Nullsoft Scriptable Install System, and that one use of this component is to assist in upgrading in-use DLLs at the next reboot.

In future, whenever your AV product complains about something, please first check with your AV vendor, have them explain in excruciating detail why they think the detected file is dangerous.

Re: NSIS.Library.RegTool.v3.{EA8CF6CC-F872-487D-A6CE-FF65D59AF322}.exe

Posted: 2019-07-11 18:35
by botg
Your AV vendor's answer will inevitably use either circular logic "This file is dangerous because we flagged it. We flagged it because it is dangerous", or hand-waving away all responsibility "we use an AI, nobody understands it, but hey, AI!"