Virus found - False positive?

[misterstormcrow]

I have been using Ripbot264 for a while and it does it's job well.

I have an issue that I am interested to find if anyone else has found the same or can provide information on.

On my previous installation of Vista, ad-aware was submitting a file from the Ripbot directory to Ad-aware for analysis.

On a scan of my new Vista installation, Ad-aware identified the uninstalled Ripbot directory as having a variation of the Win32B Hupigon trojan in HookSurcode.dll. AKA Win32Backdoor.Graybird.

I have downloaded the Ripbot and scanned it again with the same result. (From the "authors site" link which is only a link from the doom9 forums - presumably not under the authors control)

AVG on the otherhand, finds nothing which makes me wonder if it is a false positive.


It would be useful if someone who has neither installed Ripbot and has another brand of antivirus could scan the files and see what they find.


https://www.videohelp.com/tools/RipBot264

[Baldrick]

False positive.

You can also try upload the file to www.virustotal.com and see what more antivirus apps says.

[Seeker47]

At one time or another, I have seen different AV programs flag ordinary .HTML files, plain text files, and other non-executable files (which I'm fairly certain were clean) as being inhabited by malware. So I have to think that the false positive thing is a common and serious issue.