Virus Alert!

[Bob D.]

I tried to download the newest Recuva form the Piriform web site & it comes up flagged as having Malware!

 

Bob

[Andavari]

You need to provide more information:

* Antivirus software name and version

 

Most likely a false positive, however you can upload the setup file to a few multi-scanner websites such as:

* Virus Total: http://www.virustotal.com

* MetaScan Online: http://www.metascan-online.com/

* Jotti: http://virusscan.jotti.org/

* virSCAN.org: http://www.virscan.org/

[Andavari]

If you downloaded the Standard build with includes 3rd party Google software (Google Chrome, Google Toolbar) your antivirus could be detecting that in the setup file, or possibly the setup compiler it was made with which I think is NSIS ("Nullsoft Install System") and some antivirus' do falsely detect setups made with NSIS.

 

Note that there's also a Portable build, and at a later date Piriform releases a Slim build on this page, those builds do not include any 3rd party software so shouldn't really trigger any false virus detections.

 

Here's the Jotti report (with 1 false positive detection):

http://virusscan.jotti.org/en/scanresult/01f2053e65d897417d7feabdb0e027eac8e65952

 

Here's the Metascan Online report (with 1 false positive detection):

http://www.metascan-online.com/results/nz6rlnqg9pxokcd14u6lphrmvtrht2ch

 

Here's the VirSCAN.org report (with 2 false positive detections):

http://r.virscan.org/report/3d5a60a9890423899ebbfe0f1f31e244.html

[kroozer]

ClamAV tags almost all programs I submit.

[Andavari]

ClamAV tags almost all programs I submit.

 

ClamAV has been flagging tons of stuff with that "PUA.Packed.PECompact-1" for the whole month of July so far, I completely ignore it now, although ClamWin Free Antivirus isn't producing those false positives when scanning the same files.

 

I often wonder if those sites with multiple av's use paranoid settings which would not only increase detection but also increase false positives.