False Positive file for TradeALL software

[ybiton]

IObit Malware Fighter

 

OS: Windows 10

Version: 3.3.0.8

Database Version: 1484

Scan Mode:AutoCare-Idle

Time Elapsed: 00:42:16

Objects Scanned: 67009

Threats Found: 1

Save Time: 12.10.2015 05:54:47

 

|Name|Type|Description|ID|

Trojan.Generic, FILE, C:\Users\UserName\AppData\Roaming\TradeALL Masaustu\Indicators\Bands.dll, 4117165

 

 

TradeALL is a software provided by Akbank, one of the biggest banks in Turkey. IObit Malware Fighter Pro 3.3 reports it as Trojan. Please find below the virustotal link:

https://www.virustotal.com/en/file/1...is/1444635024/

and attached the log file

Please change your virus list to have tradeall software and its dll file as safe

Antivirus scan for 127dd3171fbfe78e51b9d0239b2cf278b208a0c2644d999d32cf1294fdcfe350 at2015-10-12 07:30:24 UTC - VirusTotal

[enoskype]

Hi ybiton, welcome to IObit Forum! :-) Hosgeldin!

 

Most probably false positive, but you have to upload Bands.dll to VirusTotal and give the link for the report, and upload it to Wikisend and give the link for IObit to further investigate.

 

I have added your IMF report (without your user name) to your post for IObit to analyze it.

 

Thank you and cheers.

[Cicely]

Hi ybiton,

 

Thanks for your feedback.

 

To check whether it is a false positive, please follow the instructions below:

 

1. Make sure you update it to the latest definitions version.

 

2. Zip the suspicious file with password "infected", upload it to http://www.wikisend.com and then give us the download link

 

3. Please update the file TradeALL to VirusTotal and send us the results link. ( The VT link you supplied is the for the san log not for the spacious file)

 

We are looking forward to your reply.

[enoskype]

Hi Cicely #?,

 

ybiton has the latest database 1484. TradeALL is not a file, but Bands.dll is!

BTW, I do ask the same thing most of the time from users, but what is the use of the password if everybody knows it?

 

Cheers.

[Cicely]

Hi enoskype,

 

Sorry for my mistakes. :oops:

 

Well, why we need zip with password? It is for security. If the file is not false positive but really threats, we may run the file directly without password. If so, our PC may infected. To avoid this situation, it is better to have a password. :-)