False Positive Report

[GUC_GmbH 0]

Hello,

see https://virusscan.jotti.org/de-DE/filescanjob/hmmurkzlp0; according to that, ClamAV thinks this DLL is some malware called PUA.Win.Packer.PowerbasicCc-2.

Then again, according to https://www.virustotal.com/#/file/f7fef855fdf9dac44fd23b06d1c7ecbe4142f11aaa5d68a3c91c578bdc64df05/detection the file is clean.

I'm with VirusTotal here, I'm absolutely sure that this DLL is harmless, actually I'm using it in some of my programs and I'm in contact with the author.

Please investigate the issue. Thanks & best regards, Wolfgang

DirectCOM.dll

[ritchie58 366]

We do have a False Positive submission site you are welcome to use.

Providing the correct SHA256 Hash for the file in question will be a great help to the analytical team.

Please feel free to submit your findings at this URL link.  http://www.immunet.com/false_positive

Cheers, Ritchie...

[GUC_GmbH 0]

Thanks, missed that ... done. Cheers Wolfgang

[Wookiee 21]

you mentioned clamav, detecting it. If that is the case, you can also submit it

https://www.clamav.net/reports/fp

[GUC_GmbH 0]

Thanks Wookie, missed that, too ... I went along the lines of

https://www.techsupportalert.com/content/how-report-malware-or-false-positives-multiple-antivirus-vendors.htm

which says "Submit false positives to Immunet Protect as ClamAV uses the same signatures" but it seems this page hasn't been updated for quite some time.

Not sure though if it makes sense now to send that issue to one more address - might lead to the situation where two intituitions are trying to solve the same problem which would probably be a waste of resources.

Know what, I got a very similar issue (i.e. according to Jotti's Malware Scan, CalmAV finds malware in it, according to VT it doesn't ) with another file, I'll send that one to the address you mentioned.

Cheers Wolfgang

 

[Wookiee 21]

Not a problem !

We will look into it and see why / what is going on