All false positives? [SearchMyFiles.exe,Omziff.exe - SOLVED by db 1299]

[BradG59]

All false positives, these are not trojans. Not sure about the last one though,

Misleading.FakeAV, FOLDER, C:\Users\BradG59\AppData\Roaming\GetRightToGo, 304635

..as it seems to have disappeared alltogether and is not in "quarantine" anymore either, so I can't check it out to see what it is/was?

 

Just tried to "restore" all these files/programs, but IObit Malware Fighter is asking me the directory I wish to restore them to! Surely it must remember where it took them from in the first place without me having to tell it? Maybe there should be a button/selection that says "where you bloody found it" (as the path shows?)

 

Begining to think this software is not so smart and more trouble than it's worth, definitely wouldn't pay for it if this is an example of how it works.

 

IObit Malware Fighter

 

OS: Windows 7

Version: 2.2.1.2

Define Version: 1297

Time Elapsed: 00:42:20

Objects Scanned: 67869

Threats Found: 17

Save Time: 23/12/2013 11:32:16 AM

 

|Name|Type|Description|ID|

Trojan.Droper, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\(0) mspass.exe, 4019265

Trojan.Generic, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\(0) nircmd.exe, 4000129

Trojan.WinFix, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\(0) OpenedFilesView.exe, 3081611

Trojan.Agent, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\(0) PstPassword.exe, 4019814

Trojan.Agent, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\ChromePass.exe, 4040803

Trojan.Spyware, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\keyfinder.2.0.1.zip>Keyfinder.2.0.1/keyfinder.exe, 4099001

Trojan.Spyware, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\keyfinder.exe, 4099001

Trojan.Droper, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\mspass.exe, 4019265

Trojan.Generic, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\nircmd.exe, 4000129

Trojan.Downloader, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\Omziff.exe, 4034566

Trojan.WinFix, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\OpenedFilesView.exe, 3081611

Trojan.Generic, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\passrec.zip>pspv.exe, 4104150

Trojan.Agent, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\passrec.zip>ChromePass.exe, 4040803

Trojan.Generic, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\pspv.exe, 4104150

Trojan.Agent, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\PstPassword.exe, 4019814

Agent.NCC, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\SearchMyFiles.exe, 4021860

Misleading.FakeAV, FOLDER, C:\Users\BradG59\AppData\Roaming\GetRightToGo, 304635

[Cicely]

Hi BradG59,

 

Thanks for your feedback.

 

To check whether it is a false positive, please supply us the following information:

 

• Upload the files that were reported as threats to VirusTotal and supply the report links in your next post.

• Also, ZIP the files that were reported as threats and upload the zip file to Wikisend and supply the link in your next post for iObit to investigate further.

 

You can use THIS post as an example.

 

Thanks in advance.

[BradG59]

Hi Cicely,

 

Thanks for that reply.

 

Here is the link for the files at Wikisend, http://wikisend.com/download/438306/Stuff from Kingston USB.zip

And here is the link to the VirusTotal report, https://www.virustotal.com/en/file/d733e52ee5eb2a0857e0652630e438cc3a5100201d91684c999f8eef731fc5bb/analysis/1387807177/

 

But this is still ridiculous. In the hands of a hacker, yes, these "tools" would be considered a threat, but they are part of a repair and recovery toolkit and NOT a threat in my hands. "Trojans"? What a joke!

 

That's like saying a box of matches is a threat, because of arsonists, but what about the person who needs them to cook their food or start a warm fire in the cold Winter?

 

Honestly, where is the common sense in these "detections"?

[Cicely]

Hi BradG59,

 

Thanks for your fast reply.

 

Actually, the following two files are false positive and they has been removed on Database Version 1298:

 

Agent.NCC, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\SearchMyFiles.exe, 4021860

Trojan.Downloader, FILE, C:\Users\BradG59\Desktop\Stuff from Kingston USB\Omziff.exe, 4034566

 

For others, they are threats as the VirusTotal reported. But if you do not want to scan other files, please add them in the "Ignore"list. Then, IMF will not treat them as threats.

 

Thanks for choosing IObit to care your PC.