Trojan Gen not detected?

Viruses and worms
1

See: http://killmalware.com/rnsinfratech.com/#
See missed: https://www.virustotal.com/en/url/e0733b74ca15a8a35d60437df85cbe4d8fa78f163d25987a70d121d4a431cd87/analysis/1426854559/ and here: http://quttera.com/detailed_report/rnsinfratech.com
Defacement detected by Sucuri’s.
Probably harmless? → https://www.virustotal.com/en/url/c7155e1ec173ca66b5dedc7eaa04b4b4798eee1d58a37790497b2d7c89de9a78/analysis/
Excessive header info proliferation: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Is this UDS:DangerousObject.Multi.Generic detection a FP?

polonus

2

wonder where killmalware get those detections from?

https://www.virustotal.com/nb/file/11aba5c90c4fe4b66203098377d5941f90a2803934a051a5c2f3b93038a76b72/analysis/1426855786/

3

Hi Pondus,

Here you have an oversight for that particular detection: http://support.clean-mx.de/clean-mx/md5.php?TrendMicro_HouseCall=TROJ_GEN.F47V0724
and here: http://support.clean-mx.com/clean-mx/viruses.php?virusname=UDS:DangerousObject.Multi.Generic&sort=id%20DESC
These are generic banload-family-like detections: https://www.virustotal.com/en/file/e97076c7df4255362f0561637e2bae000abce38ea9467fd0d455a6f59c40b8d0/analysis/

If indeed genuine it is a trojan-downloader.MSIL.Banload.s, known as a 'rogue anti virus’tool which pretends to clean out viruses from your computer, but does nothing of the sort. Instead, this infectious tool has been designed with one goal - to get you to purchase the 'upgraded’version of the software in the hope that it will stop annoying you.

polonus