Page 1 of 1

Possible false positive detection ?

Posted: 25 Mar 2011 00:06
by setcho
Hi,

I downloaded vlc 1.1.8 today from here http://sourceforge.net/projects/vlc/fil ... e/download today and KIS 2011 reports that the exe contains Trojan.Win32.TDSS.ccpy.

Ichecked it online and Jotti finds nothing however VirusTotal returned 2 positive results out of 43, they were as follows;
Antiy-AVL 2.0.3.7 2011.03.24 Trojan/Win32.TDSS.gen
TheHacker 6.7.0.1.156 2011.03.24 Trojan/TDSS.byjr

Maybe Kaspersky Security Network (the online cloud type service) will pick it up as an fp in a day or so but I was just wondering if anyone else has had the same issue (i saw post 4 here viewtopic.php?f=14&t=89162) and if anyone can reassure me that it is an fp.

TIA
Setcho

Re: Possible false positive detection ?

Posted: 25 Mar 2011 02:56
by mtsupilot
I got the same message from KIS2011. The uninstall.exe file was automatically deleted.

Re: Possible false positive detection ?

Posted: 25 Mar 2011 05:50
by easycrashing
vlc-1.1.8-win32.exe Windows Explorer Detected: Trojan.Win32.TDSS.ccpy

Same problem

Re: Possible false positive detection ?

Posted: 25 Mar 2011 07:24
by Xenophore
AVG IS 2011 also picks it up as Win32.TDSS.ccpy, a known Trojan.

Re: Possible false positive detection ?

Posted: 25 Mar 2011 08:24
by setcho
N.B.

For those that are interested this has now been raised at Kaspersky forums see http://forum.kaspersky.com/index.php?showtopic=204106 it would make more sense to follow the info posted there.

Regards
Setcho

Re: Possible false positive detection ?

Posted: 25 Mar 2011 10:16
by Lotesdelere