false positive virus detection SC exe

[aburg1]

my SC exe has been detected as a virus when one of my friends attempted to download and run it. he is unsure as to which antivirus is in use as he is on a large company network.

I checked the file at http://www.virustotal.com and although most antivirus engines came up clean the following 3 showed a problem:

eSafe 7.0.17.0 2008.09.17 Suspicious File

F-Secure 8.0.14332.0 2008.09.17 RemoteAdmin.Win32.WinVNC-based.c

Kaspersky 7.0.0.125 2008.09.17 not-a-virus:RemoteAdmin.Win32.WinVNC-based.c

Although I suspect these are false positives I just wanted to check.

Regards

Alan

[Oliver]

Hi, I am working for FRISK Software, so I know a bit of what's going on. Kaspersky gets it best in the description and F-Secure uses the Kaspersky engine if I am not wrong.

It is not a virus, not a trojan or other malware, but it may be noteworthy. At least those vendors consider it noteworthy.

In case of eSafe it's likely a matter of heuristic detection, so you need some common sense.

[aburg1]

Thanks Oliver, that's what I figured but better safe than sorry.

Alan

[redge]

for solve the issue, use z-zip open source self extractor
but be aware, that there are some poor AV programs, which report all UPXed files to be infected or suspicious.

refer
[post=52481][/post]