False-Positive Submission For Otshot_installer1.exe

[Vivekisme]

Hi,

 

Iobit Malware version 1.5.0.2 , has blocked installation of a product otshot_installer1.exe located at : http://c972581.r81.cf2.rackcdn.com/Otshot_installer1.exe.

The product belongs to a legitimate company.

 

Threat shown : Autorun

Exe : otshot_installer1.exe.

 

We will appreciate if you can remove this alert for this file. If there is anything specific that we need to change in order to avoid such events in future, please let us know and we will take necessary actions.

 

Thanks in advance !

 

Vivek Chakravarti

Senior QA Engineeer

Think Future Technologies

www.tftus.com

Gtalk: chakravarthi.vivek (at) tftus.com EDIT:

Skype : vivekisme

[enoskype]

Hi Vivek, welcome to IObit Forum! :-D

 

False Positives by IMF are in different pattern completely, as they are reported as malwares and quarantined (and/or deleted).

 

This IMF blocking of the registry change by a program is not otshot_installer1.exe specific (doesn't matter if the program is legitimate or not), IMF would flag any software trying to change the registry (most probably in your case startup) in the PC. The default action is blocking if not interfered by the user.

 

Ticking "Remember" and clicking on CREDIT will allow the program in question to change the registry, put it in the whitelist and will credit the program to change the registry next time if it changes the registry.

 

Please read the discussions in Why is there no Explanation of the IMF pop-up? thread and see post #24 and following posts for the explanation of the pop-up window.

 

You can take it out of that file as described in the above mentioned thread and if given CREDIT, will not be flagged (blocked) again.

 

You can try changing protection level "High <--> Recommended" in the Settings and enabling or disabling "DOG" to see if it changes the behaviour of IMF.

 

I am not from IObit, but I doubt if they change the behaviour of IMF for a specific program.

 

Please contact Cicely by PM here or send an e-mail to support@iobit.com to the attention of Cicely if you want to discuss the matter directly with IObit.

 

Cheers.

[Vivekisme]

Thanks Mate for your Prompt response.

I'll contact them directly for this.

[enoskype]

OK Vivek,

It will be nice if you mention about the function of the program you have attached. Members may download and install without knowing.

 

Cheers.