WUGNET, the Windows User Group Network
Your Complete Resource Center for "The Best" in Shareware, Computing Tips and Support, Windows Industry News... and much more!
Home Forums Shareware Windows Tips Hot Offers FREE Newsletters Arcade Contact Us About Partners
Search WUGNET: RSS Feeds RSS Feeds Advertise with WUGNET    |    Shareware eBooks
HomeHome FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log in/Register/PasswordLog in/Register/Password

False Positive, Posssible / Likely?

 
   Home -> Security -> General Discussions RSS
Next:  General Discussions: For Kayman  
Author Message
Poster Matt

External


Since: Jul 24, 2008
Posts: 4



(Msg. 1) Posted: Thu Jul 24, 2008 5:20 pm
Post subject: False Positive, Posssible / Likely? Add to elertz
Archived from groups: alt>comp>anti-virus (more info?)

Hi,

I've an .exe file that I downloaded and then scanned using
virusscan.jotti.org - these are the results.

A-Squared - Found nothing
AntiVir - Found nothing
ArcaVir - Found nothing
Avast - Found nothing
AVG Antivirus - Found nothing
BitDefender - Found nothing
ClamAV - Found nothing
CPsecure - Found Troj.W32.Chifrax.a
Dr.Web - Found nothing
F-Prot Antivirus - Found nothing
F-Secure Anti-Virus - Found nothing
Fortinet - Found nothing
Ikarus - Found nothing
Kaspersky Anti-Virus - Found nothing
NOD32 - Found nothing
Norman Virus Control - Found nothing
Panda Antivirus - Found nothing
Sophos Antivirus - Found nothing
VirusBuster - Found nothing
VBA32 - Found nothing

19 clean, 1 positive !!

What are the chances of this being a false Positive? Is it posssible or
even likely given the 19 who declared it clean?

Thanks.
Back to top
Login to vote
Art

External


Since: Aug 13, 2006
Posts: 798



(Msg. 2) Posted: Thu Jul 24, 2008 5:20 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
<postermatt.TakeThisOut@no_spam_for_me.org> wrote:

>Hi,
>
>I've an .exe file that I downloaded and then scanned using
>virusscan.jotti.org - these are the results.
>
>A-Squared - Found nothing
>AntiVir - Found nothing
>ArcaVir - Found nothing
>Avast - Found nothing
>AVG Antivirus - Found nothing
>BitDefender - Found nothing
>ClamAV - Found nothing
>CPsecure - Found Troj.W32.Chifrax.a
>Dr.Web - Found nothing
>F-Prot Antivirus - Found nothing
>F-Secure Anti-Virus - Found nothing
>Fortinet - Found nothing
>Ikarus - Found nothing
>Kaspersky Anti-Virus - Found nothing
>NOD32 - Found nothing
>Norman Virus Control - Found nothing
>Panda Antivirus - Found nothing
>Sophos Antivirus - Found nothing
>VirusBuster - Found nothing
>VBA32 - Found nothing
>
>19 clean, 1 positive !!
>
>What are the chances of this being a false Positive? Is it posssible or
>even likely given the 19 who declared it clean?

Only one way to find out for sure. Submit the file to CPsecure for
analysis. They use their own scan engine plus Kaspersky's, so
apparently it's their own scan engine that's probably false
alerting.

Art
Back to top
Login to vote
Poster Matt

External


Since: Jul 24, 2008
Posts: 4



(Msg. 3) Posted: Thu Jul 24, 2008 8:18 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Art wrote:
> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>
>> Hi,
>>
>> I've an .exe file that I downloaded and then scanned using
>> virusscan.jotti.org - these are the results.
>>
>> A-Squared - Found nothing
>> AntiVir - Found nothing
>> ArcaVir - Found nothing
>> Avast - Found nothing
>> AVG Antivirus - Found nothing
>> BitDefender - Found nothing
>> ClamAV - Found nothing
>> CPsecure - Found Troj.W32.Chifrax.a
>> Dr.Web - Found nothing
>> F-Prot Antivirus - Found nothing
>> F-Secure Anti-Virus - Found nothing
>> Fortinet - Found nothing
>> Ikarus - Found nothing
>> Kaspersky Anti-Virus - Found nothing
>> NOD32 - Found nothing
>> Norman Virus Control - Found nothing
>> Panda Antivirus - Found nothing
>> Sophos Antivirus - Found nothing
>> VirusBuster - Found nothing
>> VBA32 - Found nothing
>>
>> 19 clean, 1 positive !!
>>
>> What are the chances of this being a false Positive? Is it posssible or
>> even likely given the 19 who declared it clean?
>
> Only one way to find out for sure. Submit the file to CPsecure for
> analysis. They use their own scan engine plus Kaspersky's, so
> apparently it's their own scan engine that's probably false
> alerting.
>
> Art

Thanks Art.
Back to top
Login to vote
Poster Matt

External


Since: Jul 24, 2008
Posts: 4



(Msg. 4) Posted: Fri Jul 25, 2008 10:36 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Poster Matt wrote:
> Art wrote:
>> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
>> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>>
>>> Hi,
>>>
>>> I've an .exe file that I downloaded and then scanned using
>>> virusscan.jotti.org - these are the results.
>>>
>>> A-Squared - Found nothing
>>> AntiVir - Found nothing
>>> ArcaVir - Found nothing
>>> Avast - Found nothing
>>> AVG Antivirus - Found nothing
>>> BitDefender - Found nothing
>>> ClamAV - Found nothing
>>> CPsecure - Found Troj.W32.Chifrax.a
>>> Dr.Web - Found nothing
>>> F-Prot Antivirus - Found nothing
>>> F-Secure Anti-Virus - Found nothing
>>> Fortinet - Found nothing
>>> Ikarus - Found nothing
>>> Kaspersky Anti-Virus - Found nothing
>>> NOD32 - Found nothing
>>> Norman Virus Control - Found nothing
>>> Panda Antivirus - Found nothing
>>> Sophos Antivirus - Found nothing
>>> VirusBuster - Found nothing
>>> VBA32 - Found nothing
>>>
>>> 19 clean, 1 positive !!
>>>
>>> What are the chances of this being a false Positive? Is it posssible
>>> or even likely given the 19 who declared it clean?
>>
>> Only one way to find out for sure. Submit the file to CPsecure for
>> analysis. They use their own scan engine plus Kaspersky's, so
>> apparently it's their own scan engine that's probably false
>> alerting.
>>
>> Art
>
> Thanks Art.

It did turn out to be a false positive.

Regards, etc.
Back to top
Login to vote
Poster Matt

External


Since: Jul 24, 2008
Posts: 4



(Msg. 5) Posted: Tue Jul 29, 2008 4:09 pm
Post subject: Re: False Positive, Posssible / Likely? Add to elertz [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Poster Matt wrote:
> Poster Matt wrote:
>> Art wrote:
>>> On Thu, 24 Jul 2008 17:20:31 GMT, Poster Matt
>>> <postermatt.RemoveThis@no_spam_for_me.org> wrote:
>>>
>>>> Hi,
>>>>
>>>> I've an .exe file that I downloaded and then scanned using
>>>> virusscan.jotti.org - these are the results.
>>>>
>>>> A-Squared - Found nothing
>>>> AntiVir - Found nothing
>>>> ArcaVir - Found nothing
>>>> Avast - Found nothing
>>>> AVG Antivirus - Found nothing
>>>> BitDefender - Found nothing
>>>> ClamAV - Found nothing
>>>> CPsecure - Found Troj.W32.Chifrax.a
>>>> Dr.Web - Found nothing
>>>> F-Prot Antivirus - Found nothing
>>>> F-Secure Anti-Virus - Found nothing
>>>> Fortinet - Found nothing
>>>> Ikarus - Found nothing
>>>> Kaspersky Anti-Virus - Found nothing
>>>> NOD32 - Found nothing
>>>> Norman Virus Control - Found nothing
>>>> Panda Antivirus - Found nothing
>>>> Sophos Antivirus - Found nothing
>>>> VirusBuster - Found nothing
>>>> VBA32 - Found nothing
>>>>
>>>> 19 clean, 1 positive !!
>>>>
>>>> What are the chances of this being a false Positive? Is it posssible
>>>> or even likely given the 19 who declared it clean?
>>>
>>> Only one way to find out for sure. Submit the file to CPsecure for
>>> analysis. They use their own scan engine plus Kaspersky's, so
>>> apparently it's their own scan engine that's probably false
>>> alerting.
>>>
>>> Art
>>
>> Thanks Art.
>
> It did turn out to be a false positive.
>
> Regards, etc.

For the group's info.

File 'Default.SFX' a standard file in the WinRar
application's distribution generates a false
positive with CPsecure. Fixed as of 2008-07-29.

From: red-alert.RemoveThis@support.cpsecure.com
[support.cpsecure.com #18822]

2008-07-28:
> it is a false positive.we will modify this bug on next version as soon
> as possible.
>
> thanks for your help
>
> Best regards.
>
> cpsecure support team

2008-07-29:
> hi,
> we had modified this false positive on the lastest pattern
> 20080728213234.
>
> thanks for your help.
> Best regards.
> Cpsecure support team
Back to top
Login to vote
Display posts from previous:   
       Home -> Security -> General Discussions All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Categories:
 Windows XP
 Windows Vista
 Windows Other
 Office
 Office Other
  Security
 WinRAR
  • Home |
  • Shareware |
  • Windows Tips |
  • Hot Offers |
  • FREE Newsletters |
  • Arcade |
  • Forums |
  • eBooks |
  • About WUGNET |
  • Partners |
  • Contact

  • WUGNET Privacy Policy |
  • Link to WUGNET