False Positive for Zlob on Videora iPod Converter

Viruses and worms
1

This file is NOT infected with Zlob:

http://download1.videohelp.com/download/videoraipodconverter_Installer307.exe

(also available via download.com)

VirusTotal.com reports that Avast and two other anti-virus utils report a false positive out of a total of 32 anti-virus utils:

http://www.virustotal.com/analisis/9d9e6f6648bdafc75c3fa36e8e3fafa0

But my Avast is reporting it as infected:

Win32:Zlob-CCG trojan horse.

Details on my Avast:
Build Apr2008 4.8.1169
Xtreme Toolkit 1.9.4.0
ActiveSkin 4.2.7.3
VPS file compilation date 5/18/2008
File version 080518-0

Same thing happens for Videora iPhone converter.

Please fix this - again, this is a false positive

2

That is a reasonable possibility given the low detection rate at VT.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and possible false positive in the subject.

I believe that this is likely to be a big file that you wouldn’t want to send by email, etc. You can raise an email (without a sample) to the same address and post the information contained in your topic. Probably worth including the url of the topic also.

3

it’s possible to make a false alarm on some codecs, since Zlob hides itself as a codec… send the file as DavidR wrote and the FP will be fixed :wink:

4

If you check the URL Maxx the file is likely to be very large being an installation file (6.8MB).

That is why I also suggested sending a nominal report without attachment and the labs could grab it from the above URL ?

5

DavidR: oh, i see… you’re right… :wink:

6

False positive has been fixed in VPS 080518-1