FYI A-Squared FP on Returnil RVSShell.dll

[ypestis]

Since early this morning A-Squared free has returned the following FP:

ast update: 6/17/2009 10:26:50 PM

Scan settings:

Scan type: N/A
Objects: C:\Program Files\Returnil
Scan archives: On
Heuristics: Off
ADS Scan: On

Scan start: 6/17/2009 10:27:03 PM

C:\Program Files\Returnil\RVSShell.dll detected: Riskware.AdWare.Win32.Delf!IK


Only A-squared and their creature, Ikarus, confirms this on Virus Total.
Submitted as a false positive.
(The last false positive,yesterday,Virut in my SoundMax.Exe(!) was fixed one day after submission)

thanks
pest

[Coldmoon]

Hi ypestis,
Thanks for the heads up. I have sent a note to their research team regarding the false positive detection. As this is a FP, please be sure to add the component to your scanner's exclusion list.

Mike

[ypestis]

Thank you Coldmoon.
The false positive seems to be fixed now.

a-squared Free - Version 4.5
Last update: 6/18/2009 1:41:01 PM
Scan settings:
Scan type: N/A
Objects: C:\Program Files\Returnil\RVSShell.dll
Scan archives: On
Heuristics: Off
ADS Scan: On
Scan start: 6/18/2009 1:45:49 PM
Scanned
Files: 1
Traces: 0
Cookies: 0
Processes: 0

Found
Files: 0
Traces: 0
Cookies: 0
Processes: 0
Registry keys: 0
Scan end: 6/18/2009 1:45:49 PM
Scan time: 0:00:00