GUC_GmbH 0 Report post Posted May 28, 2018 Hello, see https://virusscan.jotti.org/de-DE/filescanjob/hmmurkzlp0; according to that, ClamAV thinks this DLL is some malware called PUA.Win.Packer.PowerbasicCc-2. Then again, according to https://www.virustotal.com/#/file/f7fef855fdf9dac44fd23b06d1c7ecbe4142f11aaa5d68a3c91c578bdc64df05/detection the file is clean. I'm with VirusTotal here, I'm absolutely sure that this DLL is harmless, actually I'm using it in some of my programs and I'm in contact with the author. Please investigate the issue. Thanks & best regards, Wolfgang DirectCOM.dll Share this post Link to post Share on other sites
ritchie58 368 Report post Posted May 29, 2018 We do have a False Positive submission site you are welcome to use. Providing the correct SHA256 Hash for the file in question will be a great help to the analytical team. Please feel free to submit your findings at this URL link. http://www.immunet.com/false_positive Cheers, Ritchie... Share this post Link to post Share on other sites
GUC_GmbH 0 Report post Posted May 29, 2018 Thanks, missed that ... done. Cheers Wolfgang Share this post Link to post Share on other sites
Wookiee 32 Report post Posted May 29, 2018 you mentioned clamav, detecting it. If that is the case, you can also submit it https://www.clamav.net/reports/fp Share this post Link to post Share on other sites
GUC_GmbH 0 Report post Posted May 29, 2018 Thanks Wookie, missed that, too ... I went along the lines of https://www.techsupportalert.com/content/how-report-malware-or-false-positives-multiple-antivirus-vendors.htm which says "Submit false positives to Immunet Protect as ClamAV uses the same signatures" but it seems this page hasn't been updated for quite some time. Not sure though if it makes sense now to send that issue to one more address - might lead to the situation where two intituitions are trying to solve the same problem which would probably be a waste of resources. Know what, I got a very similar issue (i.e. according to Jotti's Malware Scan, CalmAV finds malware in it, according to VT it doesn't ) with another file, I'll send that one to the address you mentioned. Cheers Wolfgang Share this post Link to post Share on other sites
Wookiee 32 Report post Posted May 30, 2018 Not a problem ! We will look into it and see why / what is going on Share this post Link to post Share on other sites