6 replies to this topic

[q231]

[q231]

q231, on Sep 11 2007, 09:52 AM, said:

BUMP..any reactions on this topic anyone?

sorry for double posting

[hotdoge3]

Kill it get new one is the best bet it free may be some thing go in it.

[TonyKlein]

Submit the False Positive to Panda, attaching the file. It will no doubt be fixed with the next database update.

[Whiteshark]

Don't panic!
Just submitted the installer (downloaded from FileHyppo) to Virustotal.it

-------------------------------------------------------------------
File ccsetup201.exe ricevuto il 2007.10.09 11:46:45 (CET)

Risultato: 2/32 (6.25%)

Antivirus Versione Ultimo aggiornamento Risultato
AhnLab-V3 2007.10.9.1 2007.10.09 -
AntiVir 7.6.0.20 2007.10.09 -
Authentium 4.93.8 2007.10.08 -
Avast 4.7.1051.0 2007.10.08 -
AVG 7.5.0.488 2007.10.09 -
BitDefender 7.2 2007.10.09 -
CAT-QuickHeal 9.00 2007.10.08 -
ClamAV 0.91.2 2007.10.09 -
DrWeb 4.44.0.09170 2007.10.09 -
eSafe 7.0.15.0 2007.10.08 -
eTrust-Vet 31.2.5198 2007.10.09 -
Ewido 4.0 2007.10.08 -
FileAdvisor 1 2007.10.09 -
Fortinet 3.11.0.0 2007.10.09 -
F-Prot 4.3.2.48 2007.10.08 -
F-Secure 6.70.13030.0 2007.10.09 -
Ikarus T3.1.1.12 2007.10.09 -
Kaspersky 7.0.0.125 2007.10.09 -
McAfee 5136 2007.10.08 -
Microsoft 1.2908 2007.10.09 -
NOD32v2 2579 2007.10.09 -
Norman 5.80.02 2007.10.08 -
Panda 9.0.0.4 2007.10.08 Suspicious file
Prevx1 V2 2007.10.09 Heuristic: Suspicious Hijacker
Rising 19.44.12.00 2007.10.09 -
Sophos 4.22.0 2007.10.09 -
Sunbelt 2.2.907.0 2007.10.08 -
Symantec 10 2007.10.09 -
TheHacker 6.2.6.080 2007.10.09 -
VBA32 3.12.2.4 2007.10.08 -
VirusBuster 4.3.26:9 2007.10.08 -
Webwasher-Gateway 6.0.1 2007.10.09 -

Informazioni addizionali
File size: 2628296 bytes
MD5: f055d43c0628cefec638b0445333f6a0
SHA1: 343ab144f541daa0f314cd3e9e560e670c9d9390
packers: WiseSFX Dropper, WiseSFX Dropper, WiseSFX Dropper
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5...BA37800C937F3E8

[Andavari]

Click or copy+paste the provided Prevx link into your browser address bar and you may see a statement with undetermined file good/bad while they're determining if a file is a threat, thus the suspicious rating. In other words they don't know if the file is clean or not. It's really annoying when something isn't even malware.

[Whiteshark]

Andavari, on Oct 9 2007, 02:15 PM, said:

Click or copy+paste the provided Prevx link into your browser address bar and you may see a statement with undetermined file good/bad while they're determining if a file is a threat, thus the suspicious rating. In other words they don't know if the file is clean or not. It's really annoying when something isn't even malware.

Yeah! Never read something so funny:

The following behaviors have been observed for this object:
Installs programs.

What else must do an installer?!?