MagicISO 5.4.239

Discussion in 'malware problems & news' started by Melinda, Aug 2, 2008.

Thread Status:
Not open for further replies.
  1. Melinda
    Offline

    Melinda Registered Member

    I downloaded MagicISO 5.4.239 from here: http://www.filehippo.com/download_magiciso/2561/

    My Avast Pro recognized it as a virus. I uploaded the exe file to http://virusscan.jotti.org/ and scanned for viruses. From 20 scanners only 2 recognized it as malware. Ikarus and Avast.

    I've downloaded MagicISO 5.4.239 from several other locations and it was the same. Is this a false positive or what?

    Please, can you help me?
  2. Tarq57
    Offline

    Tarq57 Registered Member

    I would say it almost certainly is a FP.
    My Avast home detects it, also. (MBAM doesn't.)
    The md5 (electronic fingerprint) checks out with that stated at filehippo. (C0565034B0E44B9AB59A684FCBD89D49)
    Filehippo has a reputation for not offering malware.
    I have taken the liberty of emailing the sample to Avast.
    ( virus@avast.com you zip and password protect the sample, and in the message body a brief note about the detection, database version, and of course, the password. Can be used for suspected FP's, and suspect malware samples.)
  3. farmerlee
    Offline

    farmerlee Registered Member

    Downloaded it, scanned it then ran it. It all seems fine as far as i can tell so its definitely a fp imo.

    Just dl it from the official site http://www.magiciso.com/download.htm and you should be fine.
  4. JRViejo
    Online

    JRViejo Global Moderator

    FYI. Downloaded from both sources and scanned by AVG. File is CLEAN.

    MD5 Checksum: C0565034B0E44B9AB59A684FCBD89D49 from FileHippo confirmed using HashTab.
  5. Tarq57
    Offline

    Tarq57 Registered Member

    Just received this email from Avast:
    So. There you go.
    Nice.
  6. Melinda
    Offline

    Melinda Registered Member

    Thanks for helping me to confirm it was false positive. Great! :thumb:
  7. Tarq57
    Offline

    Tarq57 Registered Member

    Pleasure. Thanks for posting back.
Thread Status:
Not open for further replies.