(Msg. 1) Posted: Thu Jul 24, 2008 5:20 pm
Post subject: False Positive, Posssible / Likely? Add to elertz Archived from groups: alt>comp>anti-virus (more info?)
Hi,
I've an .exe file that I downloaded and then scanned using
virusscan.jotti.org - these are the results.
A-Squared - Found nothing
AntiVir - Found nothing
ArcaVir - Found nothing
Avast - Found nothing
AVG Antivirus - Found nothing
BitDefender - Found nothing
ClamAV - Found nothing
CPsecure - Found Troj.W32.Chifrax.a
Dr.Web - Found nothing
F-Prot Antivirus - Found nothing
F-Secure Anti-Virus - Found nothing
Fortinet - Found nothing
Ikarus - Found nothing
Kaspersky Anti-Virus - Found nothing
NOD32 - Found nothing
Norman Virus Control - Found nothing
Panda Antivirus - Found nothing
Sophos Antivirus - Found nothing
VirusBuster - Found nothing
VBA32 - Found nothing
19 clean, 1 positive !!
What are the chances of this being a false Positive? Is it posssible or
even likely given the 19 who declared it clean?
(Msg. 2) Posted: Thu Jul 24, 2008 5:20 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
<postermatt.TakeThisOut@no_spam_for_me.org> wrote:
>Hi,
>
>I've an .exe file that I downloaded and then scanned using
>virusscan.jotti.org - these are the results.
>
>A-Squared - Found nothing
>AntiVir - Found nothing
>ArcaVir - Found nothing
>Avast - Found nothing
>AVG Antivirus - Found nothing
>BitDefender - Found nothing
>ClamAV - Found nothing
>CPsecure - Found Troj.W32.Chifrax.a
>Dr.Web - Found nothing
>F-Prot Antivirus - Found nothing
>F-Secure Anti-Virus - Found nothing
>Fortinet - Found nothing
>Ikarus - Found nothing
>Kaspersky Anti-Virus - Found nothing
>NOD32 - Found nothing
>Norman Virus Control - Found nothing
>Panda Antivirus - Found nothing
>Sophos Antivirus - Found nothing
>VirusBuster - Found nothing
>VBA32 - Found nothing
>
>19 clean, 1 positive !!
>
>What are the chances of this being a false Positive? Is it posssible or
>even likely given the 19 who declared it clean?
Only one way to find out for sure. Submit the file to CPsecure for
analysis. They use their own scan engine plus Kaspersky's, so
apparently it's their own scan engine that's probably false
alerting.
(Msg. 3) Posted: Thu Jul 24, 2008 8:18 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Art wrote:
> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>
>> Hi,
>>
>> I've an .exe file that I downloaded and then scanned using
>> virusscan.jotti.org - these are the results.
>>
>> A-Squared - Found nothing
>> AntiVir - Found nothing
>> ArcaVir - Found nothing
>> Avast - Found nothing
>> AVG Antivirus - Found nothing
>> BitDefender - Found nothing
>> ClamAV - Found nothing
>> CPsecure - Found Troj.W32.Chifrax.a
>> Dr.Web - Found nothing
>> F-Prot Antivirus - Found nothing
>> F-Secure Anti-Virus - Found nothing
>> Fortinet - Found nothing
>> Ikarus - Found nothing
>> Kaspersky Anti-Virus - Found nothing
>> NOD32 - Found nothing
>> Norman Virus Control - Found nothing
>> Panda Antivirus - Found nothing
>> Sophos Antivirus - Found nothing
>> VirusBuster - Found nothing
>> VBA32 - Found nothing
>>
>> 19 clean, 1 positive !!
>>
>> What are the chances of this being a false Positive? Is it posssible or
>> even likely given the 19 who declared it clean?
>
> Only one way to find out for sure. Submit the file to CPsecure for
> analysis. They use their own scan engine plus Kaspersky's, so
> apparently it's their own scan engine that's probably false
> alerting.
>
> Art
(Msg. 4) Posted: Fri Jul 25, 2008 10:36 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Poster Matt wrote:
> Art wrote:
>> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
>> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>>
>>> Hi,
>>>
>>> I've an .exe file that I downloaded and then scanned using
>>> virusscan.jotti.org - these are the results.
>>>
>>> A-Squared - Found nothing
>>> AntiVir - Found nothing
>>> ArcaVir - Found nothing
>>> Avast - Found nothing
>>> AVG Antivirus - Found nothing
>>> BitDefender - Found nothing
>>> ClamAV - Found nothing
>>> CPsecure - Found Troj.W32.Chifrax.a
>>> Dr.Web - Found nothing
>>> F-Prot Antivirus - Found nothing
>>> F-Secure Anti-Virus - Found nothing
>>> Fortinet - Found nothing
>>> Ikarus - Found nothing
>>> Kaspersky Anti-Virus - Found nothing
>>> NOD32 - Found nothing
>>> Norman Virus Control - Found nothing
>>> Panda Antivirus - Found nothing
>>> Sophos Antivirus - Found nothing
>>> VirusBuster - Found nothing
>>> VBA32 - Found nothing
>>>
>>> 19 clean, 1 positive !!
>>>
>>> What are the chances of this being a false Positive? Is it posssible
>>> or even likely given the 19 who declared it clean?
>>
>> Only one way to find out for sure. Submit the file to CPsecure for
>> analysis. They use their own scan engine plus Kaspersky's, so
>> apparently it's their own scan engine that's probably false
>> alerting.
>>
>> Art
>
> Thanks Art.
(Msg. 5) Posted: Tue Jul 29, 2008 4:09 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Poster Matt wrote:
> Poster Matt wrote:
>> Art wrote:
>>> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
>>> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>>>
>>>> Hi,
>>>>
>>>> I've an .exe file that I downloaded and then scanned using
>>>> virusscan.jotti.org - these are the results.
>>>>
>>>> A-Squared - Found nothing
>>>> AntiVir - Found nothing
>>>> ArcaVir - Found nothing
>>>> Avast - Found nothing
>>>> AVG Antivirus - Found nothing
>>>> BitDefender - Found nothing
>>>> ClamAV - Found nothing
>>>> CPsecure - Found Troj.W32.Chifrax.a
>>>> Dr.Web - Found nothing
>>>> F-Prot Antivirus - Found nothing
>>>> F-Secure Anti-Virus - Found nothing
>>>> Fortinet - Found nothing
>>>> Ikarus - Found nothing
>>>> Kaspersky Anti-Virus - Found nothing
>>>> NOD32 - Found nothing
>>>> Norman Virus Control - Found nothing
>>>> Panda Antivirus - Found nothing
>>>> Sophos Antivirus - Found nothing
>>>> VirusBuster - Found nothing
>>>> VBA32 - Found nothing
>>>>
>>>> 19 clean, 1 positive !!
>>>>
>>>> What are the chances of this being a false Positive? Is it posssible
>>>> or even likely given the 19 who declared it clean?
>>>
>>> Only one way to find out for sure. Submit the file to CPsecure for
>>> analysis. They use their own scan engine plus Kaspersky's, so
>>> apparently it's their own scan engine that's probably false
>>> alerting.
>>>
>>> Art
>>
>> Thanks Art.
>
> It did turn out to be a false positive.
>
> Regards, etc.
For the group's info.
File 'Default.SFX' a standard file in the WinRar
application's distribution generates a false
positive with CPsecure. Fixed as of 2008-07-29.
2008-07-28:
> it is a false positive.we will modify this bug on next version as soon
> as possible.
>
> thanks for your help
>
> Best regards.
>
> cpsecure support team
2008-07-29:
> hi,
> we had modified this false positive on the lastest pattern
> 20080728213234.
>
> thanks for your help.
> Best regards.
> Cpsecure support team
All times are: Eastern Time (US & Canada) (change)
Page 1 of 1
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum