in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Antivirus False Positive??? - Microsoft RAW Thumbnail Powertool

Last post 11-17-2009 6:12 AM by eyesonly. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next
  • 11-07-2009 12:33 AM

    Antivirus False Positive??? - Microsoft RAW Thumbnail Powertool

    I'm reporting a possible false positive, Blink Personal Virus & Spyware reports the Microsoft RAW Thumbnail Powertools as W32/Obfuscated.A!genr.  

    The file name is RAWSupport.exe.

    My system is Windows XP SP3.

    Please let me know if this is a false positive or actual malware.

    If you need the file, let me know how to send it to you (preferably via Blink Personal, rather than e-mail).

    BTW, Microsoft Security Essentials does NOT flag this file as malware.  

    Thanks in advance.

  • 11-07-2009 8:32 AM In reply to

    Re: Antivirus False Positive??? - Microsoft RAW Thumbnail Powertool

    eEye will need to send the file to Norman for determination.

    Email the file zipped with the password "infected" on the zip archive to malware@eeye.com with a link to this post if necessary.

  • 11-17-2009 6:12 AM In reply to

    Re: Antivirus False Positive??? - Microsoft RAW Thumbnail Powertool

    I sent the file, but w/o a password.  Windows XP did NOT give me an option of password protecting the zip archive, and I am NOT going to install PKZIP just to password protect 1 file.

    Note the file was quarantined, so you will have to restore the correct file extension (EXE) to recreate the original file quarantined by the Eeyes Antivirus.

    Please let me know if this is indeed a false positive or NOT.  Either way, I need to know.  If it's infected, then I will delete the file.  If it's a false positve, I would like to restore the file, so I can use the Microsoft RAW Thumbnail Viewer.

    Thanks in advance.  

Page 1 of 1 (3 items)
© 1995 - 2009 eEye Incorporated