False positive in Kompozer Portable file/And CCleaner file...

[spg SCOTT]

Hi,

It seems as though this file has been flagged incorrectly

Don't know if you need it, but the program can be found here: http://portableapps.com/apps/development/nvu_portable

I gather that this is an 'MS ® C Runtime Library'...

The CCleaner portable file has just turned up, in the developer scan I was doing for the other one

Developer Log:

Malwarebytes' Anti-Malware 1.44

Database version: 3749

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18882

2/17/2010 12:43:52 PM

mbam-log-2010-02-17 (12-43-47).txt

Scan type: Full Scan (K:\|)

Objects scanned: 155727

Time elapsed: 13 minute(s), 1 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

K:\PortableApps\KompoZerPortable\App\kompozer\msvcr70.dll (Malware.Packer.Gen) -> No action taken. [821617CA6D433785A41B0639164EE032]

K:\PortableApps\CCleanerPortable\App\ccleaner\unicows.dll (Malware.Packer.Gen) -> No action taken. [DB6A20E902CC082DE968F2E5944ED207]

-----------------

The CCleaner file from the zip download does not seem to trigger an alert.

Thanks,

[nosirrah]

They modify some of these files when they make these apps portable for some reason , we were detecting the modification and would not detect the real msvcr70.dll .

The modification is not malicious so i have worked around it .

[spg SCOTT]

Hi nosirrah,

Thanks for the reply

I'll let them know, and see if there is a possiblilty of avoiding it in the future...

The odd thing is, that (I'm pretty sure for the CCleaner file anyway) I think they are simply moved about. The CCleaner one shouldn't be modified as it is Closed source, and there is a portable launcher that keeps it contained...that does all the necessary things...

I'll get back to you on it.

Thanks again,