PDA

View Full Version : False Positives on RefreshEm (by The Cleaner, UNA, Ikarus)


FanJ
August 22nd, 2005, 10:10 PM
Originally this posting was meant as a warning that The Cleaner has a FP on RefreshEm.
But after two online scans it seems to be of a broader issue...

First, what is RefreshEm?
It is a free tool from Camtech2000 to repair the Windows Icon Cache.
Site: http://camtech2000.com/Pages/Useful.html
I have the tool for several years.

Now to the FP's :

The Cleaner (on-demand) told me that it was infected with SC-Keylog.
In fact I got several warnings from The Cleaner:
d:\refreshem\refrsh10.zip: refrsh10.exe SC-Keylog
d:\refreshem\useful utilities.htm SC-Keylog
d:\refreshem\refrsh10.exe SC-Keylog
d:\pestpatrol\version 4\pestpatrol.htm SC-Keylog
(As you see, two are on stored sites on my machine; one not related to RefreshEm).

As I said, I have RefreshEm for several years on my system.
I use it sometimes but not very often.

Well, I decided to do two online scans: at Jotti's and at VirusTotal.
In the next two screenshots you'll see that both UNA and Ikarus are giving a warning about refrsh10.exe

Here is the screenie from Jotti:

FanJ
August 22nd, 2005, 10:13 PM
And here comes the screenie from VirusTotal.

I'll try to inform Moosoft (The Cleaner) about it.
And I'll try to inform Camtech2000 (Jerry Campbell) about it.
I know nothing about UNA and Ikarus....