False Positive -Driver Cleaner Dot Net - Cab.dll - [SOLVED by db 1283]

[MWUser2013]

IObit Malware Fighter

 

OS: Windows 7

Version: 2.1.0.18

Define Version: 1281

Time Elapsed: 00:22:38

Objects Scanned: 63075

Threats Found: 2

Save Time: 10/26/2013 6:26:39 PM

 

|Name|Type|Description|ID|

Trojan.Generic, FILE, C:\Program Files (x86)\DriverCleanerDotNET\Cab.dll, 4107840

 

=============================================================

Driver Cleaner Dot Net is an app that helps remove all files of video drivers when updating or reinstalling,

it is safe software, and the Cab.dll has a clean bill of health as scanned by Virus Total.

http://www.drivercleaner.net/index.php

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Virus Total Report

https://www.virustotal.com/en/file/a53d1cfbbb3e17051b7e558715bd987b44dde08b737d43b43a0e778a48e3801a/analysis/

 

SHA256: a53d1cfbbb3e17051b7e558715bd987b44dde08b737d43b43a0e778a48e3801a

SHA1: 6519226ac21dd6483ae94cce174bab603b7e1626

MD5: c843fdde431fef287c0b6c6ff17a5ca9

File size: 140.5 KB ( 143872 bytes )

File name: Cab.dll

File type: Win32 DLL

Tags: aspack pedll

Detection ratio: 0 / 47

Analysis date: 2013-10-26 22:32:46 UTC ( 2 days, 12 hours ago )

 

here is the file-

Cab.dll

 

++++++++++++++++++++++++++++++++++++++++++++++++++++

 

I twice attempted to upload to the cloud via the Malware Fighter, it timed out at 25%

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[enoskype]

Hi MWUser2013, welcome to IObit Forum! :-D

 

Thanks for the detailed info for the file under consideration. Most probably false positive. Let's wait the decision of IObit.

 

What was the other threat that IMF has found?

 

Cheers.

[MWUser2013]

its the exact same file in a backup folder on my desktop - i had copied the install folder ( for Driver Cleaner containing a latest updates) from Program Files x86 as a backup - since i paid for the app, for situations where i reinstall my operating system, where i might be offline :) ( I had momentarily moved it off my thumb drive before i did the scan, to create space on the thumbdrive to move a large file)

 

IObit Malware Fighter

 

OS: Windows 7

Version: 2.1.0.18

Define Version: 1281

Time Elapsed: 00:22:38

Objects Scanned: 63075

Threats Found: 2

Save Time: 10/26/2013 6:21:05 PM

 

|Name|Type|Description|ID|

Trojan.Generic, FILE, C:\Users\Jupiter\Desktop\0 RESTORE\DONE\DriverCleanerDot-Net-RVH-2013\DriverCleanerDot-Net-RVH-2013\Program Files folder-5-2013 updated\DriverCleanerDotNET\Cab.dll, 4107840

Trojan.Generic, FILE, C:\Program Files (x86)\DriverCleanerDotNET\Cab.dll, 4107840

[Cicely]

Hi MWUser2013,

 

Thanks for your feedback.

 

Yeah, it is a false positive. And it will be removed in Database Version 1283.

 

Thanks for helping us improve our product.

 

Also, thanks enoskype who is always the first one to help our users. :-D

[mithcd]

Thanks. I was also looking at DriverCleaner. They look legit.