[clamav-users] False Positive of IObit product by ClamAV

[Al Varnell]

Coco

You will need to upload at least one of those to <http://www.clamav.net/reports/fp> in order for an investigation to be opened.

-Al-

On Fri, Mar 31, 2017 at 12:44 AM, Arnaud Jacques / SecuriteInfo.com wrote:
> 
> Received this message :
> 
> ----------  Message transmis  ----------
> 
> Objet : False Positive of IObit product by ClamAV
> Date : vendredi 31 mars 2017, 14:52:42
> De : beta feedback <beta-feedback at iobit.com>
> 
> 
> Hi ClamAV,
> 
> 
> 
> This is Coco from IObit (www.iobit.com).
> 
> 
> 
> Please forward this email to the person who may concern. This is Top Urgent.
> 
> 
> 
> Your program ClamAV reports the file RegistryDefragBootTime.exe as
> Win.Trojan.Agent-5776271-0 which is absolutely clean without any Trojan.
> 
> 
> 
> Here are false positive under different condition for your investigation:
> 
> 
> 
> 1. Here is the link of the false positive on VT:
> 
> https://www.virustotal.com/en/file/6838ec1b3326b7864dd483a39037d2372ea0bd116326814424e7b48460200066/analysis/1490873565/
> 
> Download link:
> *http://wikisend.com/download/473568/RegistryDefragBootTime.exe*
> <http://wikisend.com/download/473568/RegistryDefragBootTime.exe>
> 
> 2. false positive on VT:
> 
> https://www.virustotal.com/en/file/31bd10dc750775f6361b35c18e29c4b0f33caec48fa3f933756facb94aed7ba7/analysis/1490927572/
> 
> Download link:
> http://wikisend.com/download/327082/RegistryDefragBootTime.exe
> 
> 3.  false positive on VT:
> 
> *https://www.virustotal.com/en/file/5d293fa4dc6389e94b026c2eb1272324e0cd3dd14879fb77e919f2656fbf6285/analysis/1490873710/*
> <https://www.virustotal.com/en/file/5d293fa4dc6389e94b026c2eb1272324e0cd3dd14879fb77e919f2656fbf6285/analysis/1490873710/>
> 
> Download link:
> *http://wikisend.com/download/870064/RegistryDefragBootTime.exe*
> <http://wikisend.com/download/870064/RegistryDefragBootTime.exe>
> 
> 4.false positive on VT:
> 
> https://www.virustotal.com/en/file/2ba5ea1e7779a0d21a327986f0ceca78ef75258ec3ae1d329ef5a6727b0bb8de/analysis/1490873759/
> 
> Download link:
> http://wikisend.com/download/569572/RegistryDefragBootTime.exe
> 
> 
> 
> Please investigate this issue and solve the false positive as soon as
> possible.
> 
> 
> Any reply will be appreciated.
> -----------
> Sincerely,
> 
> Coco
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20170331/fe26cbb8/attachment.bin>