false positive for BvShell.exe [SOLVED by db 1588]

[geisenhorn]

IObit Malware Fighter

 

OS: Windows 10

Version: 4.3.0.2688

Database Version: 1586

Scan Mode: Manual

Scan Type: Smart Scan

Time Elapsed: 00:53:34

Objects Scanned: 104474

Threats Found: 1

Save Time: 10/9/2016 2:00:45 PM

Scan Status: Complete

 

|Name|Type|Description|ID|

Gen:Variant.Graftor.308577, file, C:\Program Files\Bitvise SSH Server\BvShell.exe, 0

 

This file was last analysed by VirusTotal on 2016-09-01 00:46:28 UTC (1 miesi?c, 1 tydzie?ago) it was first analysed by VirusTotal on 2016-08-04 00:37:08 UTC.

Wspó?czynnik wykrycia: 0/58

[Cicely]

Hi Geisenhorn,

 

Thanks for your feedback.

 

To check whether it is a false positive, please follow the instructions below:

 

1. Make sure you update it to the latest definitions version4.3.1 from http://update.iobit.com/dl/IObit-Malware-Fighter-Setup.exe.

 

2.If the issue remains,please zip the suspicious file with password "infected", upload it to http://www.wikisend.com and then give us the download link

 

We are looking forward to your reply.

 

 

 

[geisenhorn]

BvShell.7z <--it's a copy, since original after whitelisting was in use by the SSH serwer software which aforementioned file is part of

 

After program update (btw, how come no popup about update appeared from the program, heck, even when I clicked update, I got "no new versions available"), after update it stills gets detected but as a DIFFERENT threat 0.o

 

IObit Malware Fighter

 

OS: Windows 10

Version: 4.3.1.2873

Database Version: 1586

Scan Mode: Manual

Scan Type: Right Scan

Scan Path: C:\Program Files\Bitvise SSH Server

Time Elapsed: 00:00:04

Objects Scanned: 101

Threats Found: 1

Save Time: 10/10/2016 12:27:17 PM

Scan Status: Complete

 

|Name|Type|Description|ID|

Gen:Variant.Adware.Ghokswa.4, file, C:\Program Files\Bitvise SSH Server\BvShell.exe\BvShell.exe, 0

 

 

BTW Kaspersky Online Scanner

[TABLE=class: tbli, width: 518]

[TR]

[TD]Scan result[/TD]

[TD]File is safe[/TD]

[/TR]

[TR]

[TD]File size[/TD]

[TD]2,92MB[/TD]

[/TR]

[TR]

[TD]File type[/TD]

[TD]PE32/EXE[/TD]

[/TR]

[TR]

[TD]Date of scan[/TD]

[TD]2016-10-10 12:36:49[/TD]

[/TR]

[TR]

[TD]Bases release date[/TD]

[TD]2016-10-10 09:22:27 UTC[/TD]

[/TR]

[TR]

[TD]MD5[/TD]

[TD]8a0c3c97574c49d7625e9d2931a7e36f[/TD]

[/TR]

[TR]

[TD]SHA1[/TD]

[TD]2d2a6067505e70c183b267b2be49bc63f498c6a1[/TD]

[/TR]

[TR]

[TD]SHA256[/TD]

[TD=class: long-word]963dc35388ae51e9945f5099597eb98ff91eb3f96b01696413264572fe107343[/TD]

[/TR]

[/TABLE]

 

 

[Cicely]

Hi Geisenhorn,

 

Thanks for your reply.

 

We will do further analysis to check whether it is a false positive. And I will post result here after the test.

 

Sincerely thanks for your detailed feedback.

[Cicely]

Hi Geisenhorn,

 

After further analysis, it is a false positive and it has been removed in the latest database. Please update your database to fix the issue.

 

Thanks for helping us improve our products.

[Cicely]

Hi Jecky,

 

Please stop sending ads here. Our forum is to help users solve issues and share their feedbacks about our products.

[wickedtrump]

Launch IObit Malware Fighter after Rebooting your Device.

try these instructions after that:

mcdvoice

All IObit Products for Windows, Mac & Andriod Devices - IObit