The reason I ask this question is because I downloaded the newest stable version of Nmap for windows recently, and open completion, Windows informed me that Nmap contained a few trojans. Not that I think Window's security systems are "dead on", but I think that they might have been right this time. Nothing happened, and I calmly uninstalled the software, but still.

I know Nmap is a widely used tool these days, and I'm just a beginner after all. (Oh, and don't worry, I would have normally used my macbook, but I'm testing out these tools on my desktop first just in case anything DOES go wrong, haha).

So what is the deal with Nmap? I sure most of you use/have used it, and I think it is a required tool for the CEH, right?

Thanks.

Nmap is perfectly safe to use. Here's the MD5 hash of the version I downloaded for you to compare;

63F103F19E0CAFEFE3FB7D823B0E935F *nmap-4.20-setup.exe

It was downloaded from here; http://insecure.org/nmap/download.html. A sniffer capture during the download shows I was downloading from 208.97.160.13. Obviously there may be a few mirrors to download from.

BTW, Symantec Corporate Edition doesn't detect this as malware, and also according to Fyodors site, neither does Trend Micro's PC-cillin.