Teracopy 2.12 Win32-malware gen or FP ? [SOLVED]

just got that now after a full scan, with latest virus def 100120-1 (screenshots)
7 detections in VirusTotal
http://www.virustotal.com/analisis/0ebc770faefd76f0b8f44f5e9b6f641e72a6d46af840f7f35a8a5e0783fe8537-1264008480

I get an access denied when attempting to move to chest. Noticing that Virus total most likely doesn’t have the same virus def, they’re still using V4, but virus def is the same. Or it’s just heuristics in V5 that give that result.

OK I think that’s an FP, what’s your take guys?

edit: so, as it was impossible to send it to chest from the result page, I added it manually and submitted it just in case. Note that this 2.12 version of teracopy is very new, just a few days old.

Isn’t Terra Copy a file mover program, my vote is for FP

yeah and they’re saying on their web site they’re getting many false alerts reported to them every day, so :smiley: doesn’t prove anything but I guess that’s an FP.

I have used this program before, and I would believe that this is a FP

This may be down to the way in which it works…some AVs don’t like it maybe…I don’t know…

yes but now I have another problem ;D I added it to Chest manually just for submission, restored it, deleted it from Chest, and now I still get an access denied to the file although I even added its folder to the exclusion list 8) … I also disabled all shields temporarily and still get the access denied message from Windows ???

ownership (admin) has been removed on the file and can’t be added again, access keep being denied in the file security access rights. I’ve added it to the exclusion list in both the general settings as well as in the file shield settings…doesn’t change anything. Will see what happens after a reboot.

edit: realizing that I messed up in fact, as I submitted it to Avast, which means it’s waiting for the next virus def update to be submitted, and I removed it from Chest after that…and now it’s blocked ::slight_smile:

edit again: no, it’s been completely deleted, saw that after the reboot. I never wanted that. Which means restore didn’t work, which is what I thought actually when I saw it still appeared in Chest after I attempted to restore it. But I wasn’t sure about the behavior, thought that just a copy remaining there, in Chest ::slight_smile: … I don’t know, that’s very confusing because the file still appeared in its original folder before I rebooted.

edit: I could uninstall the program completely…doesn’t matter until the virus def is updated again.

OK I reinstalled it, and even the exe is in the exclusion list now, it’s still detected, so it’s been sent to chest by the file system shield again now, and I submitted it.

edit: my bad again, it’s a copy of the executable I made on the desktop that’s in Chest and submitted now. the original file is still where it belongs in program files, added to the exclusion list, and fully operational.

OK thanks guys, solved with latest virus def 100121.0 this morning, Teracopy isn’t detected as a virus anymore.