Real threats or false positives? [SOLVED by db 1422]

[Gaylord Focker]

Hi! I just had this report from my last scan with IObit360:

 

IObit Security 360

 

OS:Windows XP

Version:1.4.1.11

Define Version:1420

Time Elapsed:00:15:05

Objects Scanned:64732

Threats Found:4

 

|Name|Type|Description|ID|

Trojan.Generic, File, C:\Programmi\Microsoft Works\wkwcecal.dll, 12-2075

Trojan.Agent, File, C:\Programmi\Youdagames\Youda Farmer\Youda Farmer.exe, 12-2433

Trojan.Generic, File, C:\Programmi\Microsoft Sync Framework\v1.0\Runtime\x86\Msfdb.dll, 12-2075

Trojan.Generic, File, C:\SWSETUP\MSWorks\IT\PFILES\MSWORKS\WKWCECAL.DLL, 12-2075

 

I have scanned the files with Avast!, Emsisoft A-squared and Malwarebytes Anti Malware too and no threat has been found.

Besides, looking at the properties of the files they seem trustable, but I'm not an expert.

 

Are they really Trojans I have to remove or just false positive?

Please let me know as soon as possible.

 

Thank you for your kind help.

[enoskype]

Hi Gaylord Focker,

 

Please read Guidelines and Requirements for Reporting a False Positive thread.

The thread explains also how to upload the suspected files to third party web sites including www.2shared.com and www.wikisend.com.

 

After following the procedure there, the response of IObit will be much quicker.

 

Upload the suspected files to VirusTotal and give the links of the analysis reports here.

 

Cheers.

[Gaylord Focker]

Thank you enoskype.

[Gaylord Focker]

False positives? [Will be SOLVED by db 1422]

 

These appear to be false positives. Please let me know something about it.

 

IObit Security 360

 

OS:Windows XP

Version:1.4.1.11

Define Version:1421

Time Elapsed:00:19:29

Objects Scanned:64751

Threats Found:8

 

|Name|Type|Description|ID|

Tracking Cookies, Cookies, Cookie:enrico@atdmt.com/, 7-1543

Trojan.Generic, File, C:\Programmi\Microsoft Works\wkwcecal.dll, 12-2454

Trojan.Agent, File, C:\Programmi\Youdagames\Youda Farmer\Youda Farmer.exe, 12-2835

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169385.dll, 12-2454

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169386.dll, 12-2454

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169387.DLL, 12-2454

Trojan.Generic, File, C:\Programmi\Microsoft Sync Framework\v1.0\Runtime\x86\Msfdb.dll, 12-2454

Trojan.Generic, File, C:\SWSETUP\MSWorks\IT\PFILES\MSWORKS\WKWCECAL.DLL, 12-2454

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273135282

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...e11-1273135792

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136002

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...5bc-1273136147

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136378

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...5bc-1273136492

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136768

 

Thanks in advance

[hxin]

These appear to be false positives. Please let me know something about it.

 

IObit Security 360

 

OS:Windows XP

Version:1.4.1.11

Define Version:1421

Time Elapsed:00:19:29

Objects Scanned:64751

Threats Found:8

 

|Name|Type|Description|ID|

Tracking Cookies, Cookies, Cookie:enrico@atdmt.com/, 7-1543

Trojan.Generic, File, C:\Programmi\Microsoft Works\wkwcecal.dll, 12-2454

Trojan.Agent, File, C:\Programmi\Youdagames\Youda Farmer\Youda Farmer.exe, 12-2835

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169385.dll, 12-2454

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169386.dll, 12-2454

Trojan.Generic, File, C:\System Volume Information\_restore{F44C2D38-AD52-4A0F-A31B-4EB22BBA3C08}\RP788\A0169387.DLL, 12-2454

Trojan.Generic, File, C:\Programmi\Microsoft Sync Framework\v1.0\Runtime\x86\Msfdb.dll, 12-2454

Trojan.Generic, File, C:\SWSETUP\MSWorks\IT\PFILES\MSWORKS\WKWCECAL.DLL, 12-2454

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273135282

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...e11-1273135792

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136002

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...5bc-1273136147

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136378

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...5bc-1273136492

 

VirusTotal scan result 0/41

http://www.virustotal.com/it/analisi...42a-1273136768

 

Thanks in advance

Hello Gaylord Focker

We have assured that it's a false positive. Sorry for the trouble we have caused to you.

 

We will solve this issue in our later update definition 1422.

 

Thanks for your support.

[Gaylord Focker]

No trouble. Pleased to be helpful, somehow.