2 replies to this topic

[Cristiano]

http://reclassify.wr...nlinequery.aspx
www.autopatcher.com > submit -> Web reputation result: This URL is not currently listed as malicious. true

> www.autopatcher.com/apengine/apup.zip -> Web reputation result: This URL is currently listed as malicious. fake

this is the exact same mistake than mcafee set to us several months ago. do you wanna some statement? take a look at this link. only esafe you will give you an fake detection. then, unzip those files and sent them, one by one:
apup.exe -> http://www.virustotal.com/pt/analisis/fcb9...8bcfbd7a97512de result: 0/39 (0%)
7za.exe -> http://www.virustotal.com/pt/analisis/7654...ebfca725f850a5c result: 0/39 (0%)
aamd532.dll -> http://www.virustotal.com/pt/analisis/7654...ebfca725f850a5c result: 0/39 (0%)
CAPCAB.EXE -> http://www.virustotal.com/pt/analisis/b380...eb4833c7b451300 result: 0/39 (0%)
MSCOMCTL.OCX -> http://www.virustotal.com/pt/analisis/c6d3...86306a8a00338e6 result 1/39 (2.57%)
MSWINSCK.OCX -> http://www.virustotal.com/pt/analisis/b783...d20cba07f107009 result 1/39 (2.57%)

concerned about that? MSCOMCTL.OCX (6.1.95.45 - md5: 774a15583db1ad44c5ee32309c840c96 and MSWINSCK.OCX (6.1.97.82 - md5: e8a2190a9e8ee5e5d2e0b599bbf9dda6 ) can be downloaded from here

booth are untouched ms files and booth can be replaced by new versions, but doesn't matter. just download the link pointed, that comes straight from ms website. extract it with winrar or 7zip. then, upload mscomctl.ocx (6.1.97.86 md5: d268668751ee22997d7ef1417034cb04) that should be virus proof, right? again, esafe has an fake positive, at this time, blaming Microsoft himself. the same thing happens with MSWINSCK.OCX.

and, despite of this kind of false positive, some people still trust in bad anti-virus software...

shame on you, eSafe...

[]s

[James]

It's not the first time that Trend have decided that Microsoft Windows files are malicious. Their definitions are rubbish.

Type:

trend micro false positives

into Google and you will get 122000 hits


BTW FWIW I followed the last post and added a second complaint to Trend

--