PDA

View Full Version : Thunder Screenreader being flagged as malware


smage
June 5th, 2009, 03:08 PM
Hi,

There is a free screen reader which is being flagged as malware.
It can be downloaded from here:
ht tp://www.screenreader.net/index.php?pageid=2

It first started when I was using CIS 3.9, so I repoeted it as a false positive but Comodo did not correct it.
http://forums.comodo.com/false_positivenegative_reporting_is_this_a_malware_that_cis_hasnot_detected/false_positive-t39944.0.html

So I uploaded the file to VirusTotal and 10 companies are flagging this as malware.

~VirusTotal results removed per Policy. (http://www.wilderssecurity.com/showthread.php?t=180057)~

Now what should I do about this?
Should I uninstall the program, or should I report this as a false positive to 10 companies?

Thanks for your replies.

the Tester
June 6th, 2009, 11:51 AM
I would uninstall it.
If 10 companies are flagging the file, it's more likely that there is something wrong with it.

smage
June 11th, 2009, 09:55 AM
Hi the Tester,

Thanks for your reply.
Finally Mcafee has recognised this false positive.
Regards.

"Avert™ Sample Analysis
Issue Number:5341852
Virus Researcher: Haowei Ren
Filename:
Detected as Generic!Artemis
Identified: No Virus/Trojan
McAfee Avert™ Labs, Singapore

Thank you for submitting your suspicious file.
Synopsis -

McAfee(R) Avert(R) Labs researchers have examined the file in question and no malware was found.

Solution -

McAfee(R) Artemis technology provides real-time protection that secures enterprises and consumers from threats as they strike and much quicker than traditional signatures can be deployed. As Artemis is updated in real-time there is no requirement to wait for a full DAT update nor to use an EXTRA.DAT intermediate solution. Simply wait approximately 30 minutes and this false will no longer exist or trigger on your system. Depending on the network settings you have or the caching involved between your system and ours it may take slightly longer for this false alarm to be resolved."