False positives? [mspass.exe & UnPnP.exe are not FP, rest is SOLVED by db 1244]

[ribotb]

IObit Malware Fighter

 

OS: Windows 7

Version: 2.0.1.2

Define Version: 1234

Time Elapsed: 00:23:22

Objects Scanned: 59111

Threats Found: 6

Save Time: 25/05/2013 22:28:07

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Users\Bernard\Desktop\en cours\unpnp.exe, 4054313

Trojan.Generic, FILE, C:\Program Files\Nirsoft Tools\NirSoft\mspass.exe, 4109570

Win32.Spammer.Mail.Expout.A, FILE, C:\Program Files\Nirsoft Tools\NirSoft\userassistview.exe, 4016545

Trojan.Generic, FILE, C:\Program Files\MyTomTom 3\Driver\win32\DriverPreInstall.exe, 4108046

Trojan.Generic, FILE, C:\Program Files\MyTomTom 3\Driver\win32\DriverUnInstall.exe, 4108046

Trojan.Generic, FILE, C:\Windows\system32\CMDLGD6.dll, 4022659

[scrd01]

not good

 

Hi Bernard,

if it was only showing 1 or 2, id go for FP, but this many

IS NOT A GOOD SIGN.

 

As you are not showing an antivirus prog on your CP, i would suggest you install one and run it.

Then depending on the results post again.

 

numerous free AV's are available suggest you go to Majorgeeks and select from there.

 

Roy

[Cicely]

IObit Malware Fighter

 

OS: Windows 7

Version: 2.0.1.2

Define Version: 1234

Time Elapsed: 00:23:22

Objects Scanned: 59111

Threats Found: 6

Save Time: 25/05/2013 22:28:07

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Users\Bernard\Desktop\en cours\unpnp.exe, 4054313

Trojan.Generic, FILE, C:\Program Files\Nirsoft Tools\NirSoft\mspass.exe, 4109570

Win32.Spammer.Mail.Expout.A, FILE, C:\Program Files\Nirsoft Tools\NirSoft\userassistview.exe, 4016545

Trojan.Generic, FILE, C:\Program Files\MyTomTom 3\Driver\win32\DriverPreInstall.exe, 4108046

Trojan.Generic, FILE, C:\Program Files\MyTomTom 3\Driver\win32\DriverUnInstall.exe, 4108046

Trojan.Generic, FILE, C:\Windows\system32\CMDLGD6.dll, 4022659

 

Hi ribotb,

 

Thank you for your feedback.

 

It is found that your Define Version: 1234 is not the latest. The latest Define Version is 1237. Please update your IObit Malware Fighter to the latest and run it again to see whether it still find the same threats.

 

If it does, please zip the programs that are detected as threats and send them to us.

 

Thanks in advance.

[ribotb]

Hi,

I'm sorry for the delay.

With version 1241 the results are identical. I send you a zip.

Regards,

Bernard Ribot

[Cicely]

Hi ribotb,

 

Thank you for your reply.

 

If you have the latest Define Version: 1242, but still have the same issue. Please zip these files that are detected as threats on your PC and send them to us in attachment.

 

Thanks in advance. :-D

[ribotb]

Hi,

 

Same issue with version 1243.

Zip file in attachment.

 

Regards,

Bernard Ribot

[Cicely]

Hi ribotb,

 

Thanks for your reply.

 

After test, it is found there are two files that are not false positive but threats.

 

mspass.exe : It is virus. Please check https://www.virustotal.com/en/file/3f3c8484962b395f304a836ee5e8ee17beaafe982795c9747d8ee98cc6e4ca8f/analysis/

 

UnPnP.exe : It is also virus. Please check

 

https://www.virustotal.com/en/file/e7a5a0c2bfb2f54532bbb87c78d1882ac0c84398a12201c316b89500db527252/analysis/

 

It is suggested to boot your PC in safe mood and run your anti-virus software to remove the threats.

 

The others are false positives and they will be removed in Define Version1244.

 

Thanks for your help. ;-)

[ribotb]

Hi,

 

I do not quite agree with you. :-)

 

uPnP is detected as virus by 3 anti-virus only, out of 28 , and they are not among the best known. By against Kaspersky, Malwarebytes, BitDefender, Symantec , etc. find uPnP not a virus.

 

mspass is a Nirsoft software. Nirsoft indicates that "False Alert Problems: Some Antivirus programs detect MessenPass utility as infected with Trojan/Virus. Click here to read more about false alerts in Antivirus programs ".

 

Regards,

Bernard Ribot

[ribotb]

Hi,

 

With define version 1251, unpnp.exe is is no longer considered a malware.:-)

 

Still Nirsoft mspass.exe.:-(

 

Best regards,

Bernard Ribot