[clamav-users] False Positive of IObit product by ClamAV

[Steve Basford]

On Fri, March 31, 2017 8:44 am, Arnaud Jacques / SecuriteInfo.com wrote:
> Received this message :
>
>
> ----------  Message transmis  ----------
>
> This is Coco from IObit (www.iobit.com).
>
>
> Your program ClamAV reports the file RegistryDefragBootTime.exe as
> Win.Trojan.Agent-5776271-0 which is absolutely clean without any Trojan.

Looks like it's a ClamAV hash signature...

daily.hsb:a500f83ecc7aad400ee677b096193a95:24352:Win.Trojan.Agent-5776271-0:73
-- 
Cheers,

Steve
Twitter: @sanesecurity