Solved:i Think I Found A Trojan.generic.94583 False Positive

Houston

I believe I've found a false positive for Trojan.Generic.94583. My BD detected this trojan in a file that's been on my computer for about 6 months. It's a plugin installer for winamp, to play .PSF formatted music.

Download link can be found at http://www.neillcorlett.com/downloads/HE209.exe (Couldn't upload, 'cause BD killed it >_>)

Thought I'd mention it. I hope to hear I'm right about this. ^^;

Paddy

I'm convinced that it's a false positive. I ran the program in Sandboxie and installed the plugin. Everything was fine, and the only file created was the plugin file, "in_psf.dll" (MD5: 832735e1a1ed002449d393e719999f5c, filesize: 401408 bytes) which installed to the expected location.

The plugin file itself isn't malicious according to VirusTotal (which usually has at least one false positive report, but not in this case), or indeed BitDefender:

http://www.virustotal.com/analisis/c2d3966...5db74308b0eb0c3

Official confirmation would be nice, though!

phanthom

I'm convinced that it's a false positive. I ran the program in Sandboxie and installed the plugin. Everything was fine, and the only file created was the plugin file, "in_psf.dll" (MD5: 832735e1a1ed002449d393e719999f5c, filesize: 401408 bytes) which installed to the expected location.

The plugin file itself isn't malicious according to VirusTotal (which usually has at least one false positive report, but not in this case), or indeed BitDefender:

http://www.virustotal.com/analisis/c2d3966...5db74308b0eb0c3

Official confirmation would be nice, though!

Indeed a false alarm. Detection has been removed.