Lupo PenSuite v2013.04 Full False Positive

[drnstvns]

Scan report:

IObit Malware Fighter

 

OS: Windows XP

Version: 2.1.0.18

Define Version: 1280

Time Elapsed: 00:49:08

Objects Scanned: 153658

Threats Found: 1

Save Time: 10/23/2013 12:30:12 PM

 

|Name|Type|Description|ID|

Spyware.Password, FILE, H:\Lupo_PenSuite_v2013.04_Full\Launcher\libmng.dll, 4032292

 

The file being studied is a Portable Executable file! More specifically, it is a Win32 DLL file for the Windows GUI subsystem. Its located within the Lupo PenSuite's launcher folder and has been scanned and reported as clean several times at virustotal.com http://tinyurl.com/lfayqha

[Cicely]

Hi drnstvns,

 

Thanks for your feedback.

 

Please also ZIP the file that was reported as threat and upload it to Wikisend and supply the link in your next post

 

With this information, we can check whether it it false positive.

 

Looking forward to hearing from you.

[SmokeScreen]

Hi drnstvns,

 

Thanks for your feedback.

 

Please also ZIP the file that was reported as threat and upload it to Wikisend and supply the link in your next post

 

With this information, we can check whether it it false positive.

 

Looking forward to hearing from you.

 

I understand your requirement to analyse false positive files, but am curios about the lawfulness and ethics of uploading/distributing a copyrighted file/code to a file sharing website.

 

I'm sure this is the easiest solution for yourselves, but it puts the person submitting the file in 'murky waters' with regards to copyright and patent laws. To the best of my knowledge, even open source and GPL licence agreement state that the package (all files) must remain together when distributed.

 

Is there some kind of clause in these laws for the computer security software developers?

 

Anyway, was just reviewing this thread after finding a false positive and considering submitting it.

 

Keep up the great work on your awesome software :-D

[Cicely]

Hi SmokeScreen,

 

Thanks for your reminding.

 

For the situation you mentioned, we will give our users 2 choices to send us the files that were detected as threats.

 

1) Users can still choose to upload the files to wikisend. But it is suggested to zip the files with password.They just tell us the password and then we can download the files to check. Others without the password can not get the files.

 

2) Users can send us the files directly to is360feedback@gmail.com with Subject False Positive files.

 

Thanks for your suggestions again. :-D