Author Topic: thoughts on possible false positive  (Read 1309 times)

0 Members and 1 Guest are viewing this topic.

Offline sonyboyj

  • Jr. Member
  • **
  • Posts: 45
thoughts on possible false positive
« on: September 26, 2016, 09:28:34 PM »
first off i dont pirate software. a friend asked my advice to a possible threat i told him to upload it to virustotal he gave me the link. he also emailed me the file that i downloaded in a VM i scanned the file with updated Avast,superantispyware and malwarebytes. nothing found also in the VT scan lots of the big names Kaspersky,bitdefender,fseure,M$ say no threat. so i left wondering are the companys saying threat just saying that as its a keygen and adobe maybe paid them to say this to scare ppl. https://www.virustotal.com/en/file/0833d82ceade071f5c9ce023d38c991819c5c33a465fc1a2f8081f2b98157b5d/analysis/1474914995/ in my opinion id say its safe.

 

jotti

https://virusscan.jotti.org/en-US/filescanjob/zddnb5rg15

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: thoughts on possible false positive
« Reply #1 on: September 26, 2016, 10:11:23 PM »
Hi sonyboyj,

Would not say it is malware per se, but it is classified as riskware, that means a threat to those that unwillingly got it and are not aware what it does.
More-over as a circumventing crack it might be said it is certainly frowned upon by DMCA and might infringe rights where such rights are upheld.

The way it is being compiled has qualities it shares with known malware: https://www.reasoncoresecurity.com/xf-adobecc.exe-6d927ed04c20145185a231acf16328c98508c154.aspx

Also known results to reside here: -http://www.tongso.com/so.jsp?query=xf-adobecc2015&page=11&ie=utf8

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: thoughts on possible false positive
« Reply #2 on: September 26, 2016, 11:10:15 PM »
Additional Information > First submission 2013-07-25 19:56:40 UTC ( 3 years, 2 months ago )

http://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/crck_keygen

I would say detection is correct

« Last Edit: September 26, 2016, 11:29:15 PM by Pondus »