Malware Fighter False positive? - CPUID's PC Wizard [Will be SOLVED by db 1325]

[SeattleMarc]

Program: CPUID's PC Wizard v2013.2.12

Program DL Link: http://www.cpuid.com/softwares/pc-wizard/versions-history.html

"Offending" File: webupdt.exe

webupdt.exe attached as "webupdt.zip" with Password = CPUID

 

Overview:

IOBit Malware Fighter (XP-32 & Win 7-64) reports as Trojan.TheRipper.

HOWEVER...

AVG 2014 reports: No threats found

VirusTotal Detection ratio: 1/50, TrendMicro-HouseCall: TROJ_GEN.F47V1021: 20140305

IOBit Cloud: SAFE

 

IOBit Malware Fighter Results:

========================

IObit Malware Fighter

OS: Windows 7

Version: 2.3.0.13

Define Version: 1324

Time Elapsed: 00:56:25

Objects Scanned: 38319

Threats Found: 1

Save Time: 3/26/2014 10:25:43 AM

|Name|Type|Description|ID|

Trojan.TheRipper, FILE, D:\PROGRAM FILES\(TECH_SUPPORT)\CPUID_PC Wizard (port)\Web\webupdt.exe, 4010422

========================

IObit Malware Fighter

OS: Windows XP

Version: 2.3.0.10

Define Version: 1324

Time Elapsed: 00:00:00

Objects Scanned: 1

Threats Found: 1

Save Time: 2014-03-26 10:42:32

|Name|Type|Description|ID|

Trojan.TheRipper, FILE, K:\INSTALL\PROGRAM FILES\(TECH_SUPPORT)\CPUID_PC Wizard (port)\Web\webupdt.exe, 4010422

========================

VIRUS TOTAL:

SHA256: 63c97d241ebbcd4839e1ebf6bae3633c10ac067603f2fb68e6f0da4f2c344098

File name: webupdt.exe

Detection ratio: 1 / 50

Analysis date: 2014-03-05 17:22:58 UTC ( 3 weeks ago )

https://www.virustotal.com/en/file/63c97d241ebbcd4839e1ebf6bae3633c10ac067603f2fb68e6f0da4f2c344098/analysis/

========================

IOBIT CLOUD:

Cloud Scan: SAFE

File Name: webupdt.exe

File Size: 213 KB (218,112 Bytes)

File MD5: 2e6b32958ba4ae8ebaea020129c34d2b

File SHA1: af574e3da1d7cd86cc091be055f80925e6c25c3d

File Type: exe

http://cloud.iobit.com/index.php?id=14bb8bdea229a85743e56aeaf18da66b641d5007edbfea6a5ba4a4c85284a006942030373c6f6e01ea521ab82a104224a834d5813a0b84218bb8&signature=6a43a9e09c67024ee5

========================

 

Thanks!

[Cicely]

Hi SeattleMarc,

 

Thanks for your feedback.

 

Yeah, it is a false positive and it will be removed in Define version 1325.

 

Thanks for helping us improve our product. :-D