PDA

View Full Version : False Positive? ConvertXtoDVD



SirQwerx
03-12-2009, 12:51 AM
The setup file, downloaded from the original site, flags as a trojan when run.

http://www.vso-software.fr/products/convert_x_to_dvd/


Its flags it as "Trojan-Downloader.Agent!ct".

Can you confim this is an actual trojan? A previous version of this same program flagged as:

"Trojan-Downloader.Banload!ct."

Also - a side question - while its possible to remove an item from quarantine, it ultimately ends up back there during the next scan. Is there a way to exclude that file from further interrogation when its determined to be a false positive? I can't find this functionality anywhere in the program. (Using the free version 6.0.0.17 on XP-SP3)

haapy
03-12-2009, 02:50 AM
If ( I say if because I do not use PCTAV, but SD has the GAL) PCTAV has a Global Action list, add it there as an excluion.

AChen
03-12-2009, 06:10 AM
Hi SirQwerx,

We are currently looking into this, will have to give this a test and if it is a False Positive, we'll resolve this issue.

Haapy, fyi:

PC Tools AntiVirus has a Scan Exclusion feature that allows PC Tools AntiVirus to ignore certain file or filetypes during scan. To access the Scan Exclusion, please follow the instructions below:

1. Launch PC Tools AntiVirus
2. Click on Settings
3. Click on Scan Settings
4. Click on Scan Exclusions
5. Click on Add Folder/File
6. Browse to the File/Folder and click OK

The added exclusion should show in the list by now.

7. Click on OK again on the Scan Exclusion window.

PC Tools AntiVirus would now exclude the item(s) during scan.

AChen
03-13-2009, 02:12 AM
We've tried testing this and could not recreate the problem. We installed the setup and running the program itself without any detections. Are you using PCTAV or SD?

SirQwerx
03-15-2009, 05:06 PM
I was using the most recent release of PC Tools AV (Free Edition) 6.0.0.17

AChen
03-16-2009, 12:30 AM
Is it possible to post the file that is being detected and we'll check this out. You can also send this to my email address which I have sent via PM.