Author Topic: False positive: winapiexec  (Read 3432 times)

0 Members and 1 Guest are viewing this topic.

9999

  • Guest
False positive: winapiexec
« on: August 03, 2012, 06:28:38 PM »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: False positive: winapiexec
« Reply #1 on: August 03, 2012, 06:40:11 PM »
Have you tested the file at www.virustotal.com

when done, post the scan link here do we can see the result
« Last Edit: August 03, 2012, 06:41:43 PM by Pondus »


Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: False positive: winapiexec
« Reply #3 on: August 03, 2012, 06:51:21 PM »
You can report a possible false positive here: http://www.avast.com/contact-form.php

Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Offline polonus

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: False positive: winapiexec
« Reply #4 on: August 03, 2012, 07:30:34 PM »
Only avast and GData detect: http://rammichael.com/downloads/winapiexec.rar  (probably FP because of Real basic code)
See no SpyEye alert on the url scan: http://urlquery.net/report.php?id=113654 or a Generic Backdoor alert of any sort,
and most phishes for yhe IP general are dead. See: http://hosts-file.net/default.asp?s=facepoker.us
Analysis, see: http://anubis.iseclab.org/?action=result&task_id=10b10b5cca992dff4c933d0fcfb756aeb&format=html
Probably bad download site for this: http://www.mywot.com/en/scorecard/65.39.72.142?utm_source=addon&utm_content=popup-donuts,

polonus
« Last Edit: August 03, 2012, 11:34:46 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: False positive: winapiexec
« Reply #5 on: August 03, 2012, 07:31:51 PM »
First seen by VirusTotal
2012-03-19 20:14:50 UTC ( 4 måneder, 2 uker ago )

9999

  • Guest
Re: False positive: winapiexec
« Reply #6 on: August 07, 2012, 10:01:48 PM »

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: False positive: winapiexec
« Reply #7 on: August 07, 2012, 10:07:11 PM »
Your welcome. :)

Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."