[Qgis-user] QGIS has the virus Hacktool.Win64.NirCMD.SM?

[Andreas Neumann]

Hi all,

This topic comes up every couple months, dating back almost a decade or 
two. If you google for "QGIS nircmd virus" you will find plenty of 
discussions around this topic, like this discussion thread from 2011: 
http://osgeo-org.1560.x6.nabble.com/Re-Qgis-user-nircmd-flagged-as-a-virus-td4102707.html

QGIS is using nircmd to manage settings in .ini setting files, or other 
smaller tasks useful during installation or launching of QGIS. See 
http://www.nirsoft.net/utils/nircmd.html

Unfortunately, AV software is frequently flagging legitimate software 
as  dangerous - they just do a really bad job! One can ask them to 
investigate, then they fix it temporarily, but the next version will 
bring up the same warning again ... it's kind of a tedious task trying 
to fix such issues with AV software vendors. They like to scare users to 
make their software seem relevant and important to their customers.

Greetings,

Andreas

Am 14.05.20 um 22:47 schrieb Christine:
> Good evening,
> was also worried this afternoon by the same alerts on two different machines
> of my employer. Both with TREND supervision. The alerts had something to do
> with contents in  OSGeo4W and QGIS folders. Couldn't reach the IT colleques
> so will possibly  have discussions tomorrow.
>
> Regards, Christine
>
>
>
> --
> Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
> _______________________________________________
> Qgis-user mailing list
> Qgis-user at lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user