Dr Web and mirc.exe

Hi,

I ran a scan with DrWeb just now and it picked up mirc.exe. I uploaded mirc.exe to virustotal and none of the avs there picked it up.( DrWeb included)..

My question is why is it that on virustotal DrWeb didn't flag it as virus but it did on my machine here ?

Thanks

 

i dono but when i ran dr web cure it on someone's badly infected machine it detected mirc.exe as "riskware"
i think more companys should make a on demand scanner like dr web's
lodore

 

It can be added through Agent.AH Trojan and IRCFLOOD-M Worm.

 

Well if my "mirc.exe" was infected drweb would have picked it up on virustotal too ?

I just don't understand why DrWeb would consider it a a nasty here but the same DrWeb does not pick it up on virustotal.

 

why not submit and ask here.

 

im not too sure it is a false positive,

i know trend also picks it up and either f-secure or avg used to pick mirc up aswell.

i dont think its a 'threat' but more of riskware and it just warns you about it.

 

Yes, other avs, like kaspersky and ikarus consider it riskware as well but if an av warns me here then it should also warn me when I upload it to virustotal ?

 

depends what options they have set on the engines.
lodore

 

i wouldnt count on virustotal too much,

the question should be, if its just riskware, do you choose to delete it, or not?

as it doesnt damage the machine in anyway, decisions decisions

 

Why not ?

 

i dont know as i am not the creator of virustotal, lol

but countless times, it has stated an AV 'found nothing' when infact the installed software does actually detect it and remove it without problems.

 

The only reason you should be worried if your AV detects mIRC...............is if you actually haven't installed it yourself...then you should be worried and hit the delete button........well uninstall it first if possible of course.

 

did you download mIRC from their original website ?

 

Of course I did.

 

I'm not sure that DrWeb uses riskware/hacktools defs in VirusTotal at all. So many times my DrWeb has found these kind of nasties but on VirusTotal DrWeb finds nothing.

Best regards,
Firefighter!

 

yeah agree

thats why i tried to say above in one of the posts. lol

 

Btw, maybe OT but have you ever found smarter av icon so far than this cute spider in the system tray? For someone even this may be the reason to use this smart av.

Best regards,
Firefighter!

 

Yes, as a backup scanner it is good enough.I would not use it as my real time AV tho.Either Kav or Nod32 for me

 

wrong thread m8

 

I was answering firefighter but ok it was a bit ot.

 

Same thing here, a2 says mirc.exe is infected, but not any other antivirus, even dr.web online and kaspersky online. It is strange, and I downloaded mirc from it's site.