VirusTotal.com reports bug

when checking version 142 out with virus total its saying there is a PUA.Packed.PECompact-1 is this a virus or some kind or malware .?

any info would be great thanks...

see link below.

https://www.virustotal.com/file/adaa75a97cbc8692d867298fca96d678ab6ca273da27a1d48a6dd1a38eb4db94/analysis/

If you got the Recuva setup from Piriform or FileHippo then it is a false positive by ClamAv.

yes i downloaded it from both of them locations..

what is it with this "false positive" everytime i chk a file on virus total and it pulls it everyone i talk to says, yer it will be a false positive just install it..

why do we bother with AV's if they just going to give the so caled "false positive's" all the time ?

they must be a reason why its giving out false positive's...

In my honest opinion Positive virustotal is usually 7+ positves. 3-4 is worrisome, 1-2 is usually a false postive.

False Postives can happen for a number of reasons, here are three:

  • Most Antivirus programs use Heuristics. These algorithms look at the code and try to decide what the code might be capable of doing.
  • Sometimes a bit of mal-code is written much like a current bit of code in another program, the false positive comes from the AV saying "I think I know you, you're a bad guy."
  • certain methods of making an installation file tend to trigger certain antivirus' (in all honestly it's usually Clam) sniffers.*

*i'm pretty sure this is the case for the PUA.Packed.PECompact-1 you reported

http://answers.yahoo...14082047AAdp7mn

It thinks it may have found http://home.mcafee.com/virusinfo/virusprofile.aspx?key=559290#none but since the other AVs didn't think so it is, ~90% chance, a false positive; it's best to report all suspected files which may be (or are) false postive to the AV company that flagged so they can deflag it if it is indeed false.