RockXP4.exe - False Positive?

[pcjm]

Hi, new to reporting. So i ask forgiveness in advance if i have mucked up how to do it. [note: WHERE the 'sticky' with instructions on how to do this?]

 

IObit Malware Fighter

 

OS: Windows Vista

Version: 2.0.1.6

Define Version: 1243

Time Elapsed: 00:47:22

Objects Scanned: 79031

Threats Found: 1

Save Time: 6/18/2013 10:04:55 AM

 

|Name|Type|Description|ID|

Trojan.Spyware, FILE, C:\Users\admin\Documents\Downloaded Software\RockXP4.exe, 4075154

 

SUBMITTED TO:

https://www.virustotal.com/en/file/bb3dbe4370069f5683d0f1037e1dedc604ec603219331ac4e2ecfe34a48a7191/analysis/1371568164/

 

SHA256: bb3dbe4370069f5683d0f1037e1dedc604ec603219331ac4e2ecfe34a48a7191

SHA1: 49a1a8de703e9973d42581c67fead7a8b38b715c

MD5: d6238f064bb9aaea7345252c4262fa5a

File size: 712.5 KB ( 729584 bytes )

File name: RockXP4.zip

File type: ZIP

Detection ratio: 3 / 46

Analysis date: 2013-06-18 15:09:24 UTC ( 0 minutes ago )

0

0

Less details

 

Analysis

Additional information

Comments

Votes

 

File identification

MD5 d6238f064bb9aaea7345252c4262fa5a

SHA1 49a1a8de703e9973d42581c67fead7a8b38b715c

SHA256 bb3dbe4370069f5683d0f1037e1dedc604ec603219331ac4e2ecfe34a48a7191

ssdeep

12288:Dpbd9hp9UeArMJsHq9++cBTW///BGsC229qdjOF4Ui6+hDiWRZs9cQ3VmMXIX:Jdn42sHq9++cdapG/3qVAcQUMc

 

File size 712.5 KB ( 729584 bytes )

File type ZIP

Magic literal

Zip archive data, at least v2.0 to extract

 

TrID ZIP compressed archive (100.0%)

VirusTotal metadata

First submission 2013-06-18 15:09:24 UTC ( 4 minutes ago )

Last submission 2013-06-18 15:09:24 UTC ( 4 minutes ago )

File names RockXP4.zip

ExifTool file metadata

MIMEType

application/zip

 

ZipRequiredVersion

20

 

ZipCRC

0x31716d40

 

FileType

ZIP

 

ZipCompression

Deflated

 

ZipUncompressedSize

787364

 

ZipCompressedSize

729464

 

ZipFileName

RockXP4.exe

 

ZipBitFlag

0x0001

 

ZipModifyDate

2012:12:11 12:26:15

[enoskype]

Please follow the procedure!

 

Hi pcjm, welcome to IObitForum! :-D

 

Since 3 antivirus software have found it as a malware, it may not be a false positive.

Please upload the file in a zip file to Wikisend and give the download link in your next post so IObit can further investigate it.

 

The latest IMF is IMF2.0.1.8 and can be downloaded from the link in

IObit Malware Fighter 2.0.1.8 is released! thread.

 

The latest database version is 1244 as of today, and it will be updated to 1245 tomorrow, please update your database version.

 

BTW, you can use THIS post as an example.

 

Cheers.