MagicISO 5.4.239

Discussion in 'malware problems & news' started by Melinda, Aug 2, 2008.

Thread Status:
Not open for further replies.
  1. Melinda

    Melinda Registered Member

    Joined:
    Aug 2, 2008
    Posts:
    7
    I downloaded MagicISO 5.4.239 from here: http://www.filehippo.com/download_magiciso/2561/

    My Avast Pro recognized it as a virus. I uploaded the exe file to http://virusscan.jotti.org/ and scanned for viruses. From 20 scanners only 2 recognized it as malware. Ikarus and Avast.

    I've downloaded MagicISO 5.4.239 from several other locations and it was the same. Is this a false positive or what?

    Please, can you help me?
     
  2. Tarq57

    Tarq57 Registered Member

    Joined:
    Oct 7, 2006
    Posts:
    966
    Location:
    Wellington NZ
    I would say it almost certainly is a FP.
    My Avast home detects it, also. (MBAM doesn't.)
    The md5 (electronic fingerprint) checks out with that stated at filehippo. (C0565034B0E44B9AB59A684FCBD89D49)
    Filehippo has a reputation for not offering malware.
    I have taken the liberty of emailing the sample to Avast.
    ( virus@avast.com you zip and password protect the sample, and in the message body a brief note about the detection, database version, and of course, the password. Can be used for suspected FP's, and suspect malware samples.)
     
  3. farmerlee

    farmerlee Registered Member

    Joined:
    Jul 1, 2006
    Posts:
    2,585
    Downloaded it, scanned it then ran it. It all seems fine as far as i can tell so its definitely a fp imo.

    Just dl it from the official site http://www.magiciso.com/download.htm and you should be fine.
     
  4. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    16,884
    Location:
    U.S.A.
    FYI. Downloaded from both sources and scanned by AVG. File is CLEAN.

    MD5 Checksum: C0565034B0E44B9AB59A684FCBD89D49 from FileHippo confirmed using HashTab.
     
  5. Tarq57

    Tarq57 Registered Member

    Joined:
    Oct 7, 2006
    Posts:
    966
    Location:
    Wellington NZ
    Just received this email from Avast:
    So. There you go.
    Nice.
     
  6. Melinda

    Melinda Registered Member

    Joined:
    Aug 2, 2008
    Posts:
    7
    Thanks for helping me to confirm it was false positive. Great! :thumb:
     
  7. Tarq57

    Tarq57 Registered Member

    Joined:
    Oct 7, 2006
    Posts:
    966
    Location:
    Wellington NZ
    Pleasure. Thanks for posting back.
     
Thread Status:
Not open for further replies.