Assigned Zemana False Positive Report Thread

[JM Safe]

Hi @JM Safe

Yes it is fixed now

And I have some more 3 FPs for you

MD5 : 4A38BA871060DE96DF0590899879C5EC
Status : Scanned
Object : c:\windows\system32\drvstore.dll
Publisher :
Size : 410
Detection : Suspicious:SRC!P
Action : Quarantine

MD5 : C69219E96DA783E323A116CF995A516C
Status : Scanned
Object : c:\windows\system32\printisolationproxy.dll
Publisher :
Size : 161
Detection : Suspicious:SRC!P
Action : Quarantine

MD5 : 5F54D30E11477A4E61978C4933B77876
Status : Scanned
Object : c:\windows\system32\diagperf.dll
Publisher :
Size : 500
Detection : Suspicious:SRC!P
Action : Quarantine

drvstore.dll

VirusTotal

VirusTotal

www.virustotal.com

drvstore.dll

VirusTotal

VirusTotal

www.virustotal.com

diagperf.dll

VirusTotal

VirusTotal

www.virustotal.com

PrintSandboxProxy.dll

VirusTotal

VirusTotal

www.virustotal.com

The Feedback is submitted to you via the UI

With best Regards
Mops21

Thank you @Mops21 , we will look into this

 

[Mops21]

Thank you @Mops21 , we will look into this

Hi @JM Safe

I have send you the Feedback via the UI and after your email I have send you 3 screenshots to you for check

With best Regards
Mops21

 

[spaceoctopus]

Hi @JM Safe
Last week did a scan with ZAM free and it detected Minitool Shadow maker, backup software, as malicious. I whitelisted it and reported as false positive through the interface. Has it been fixed? Thank you

 

[JM Safe]

Hi @JM Safe

I have send you the Feedback via the UI and after your email I have send you 3 screenshots to you for check

With best Regards
Mops21

The 3 False Positives you reported before here: Zemana False Positive Report Thread are fixed.

 

[JM Safe]

Hi @JM Safe
Last week did a scan with ZAM free and it detected Minitool Shadow maker, backup software, as malicious. I whitelisted it and reported as false positive through the interface. Has it been fixed? Thank you

Hi @spaceoctopus Did you download Minitool from official website?

 

[spaceoctopus]

Hi @spaceoctopus Did you download Minitool from official website?

I didn't do a screenshot at the time it happened. Yes it was downloaded from the official website of Minitool.(MiniTool Solutions | Best Partition Manager & Data Recovery [Software] )
After that i did a series of on demand scans with EEK,HMP, Malwarebytes and Panda. No detections.

 

[JM Safe]

I didn't do a screenshot at the time it happened. Yes it was downloaded from the official website of Minitool.(MiniTool Solutions | Best Partition Manager & Data Recovery [Software] )
After that i did a series of on demand scans with EEK,HMP, Malwarebytes and Panda. No detections.

Thank you we will look into it.

 

[spaceoctopus]

Thank you we will look into it.

Copy copy Thanks!

 

[JM Safe]

Copy copy Thanks!

Could you please say to me which file was flagged? Thank you.

 

[Mops21]

The 3 False Positives you reported before here: Zemana False Positive Report Thread are fixed.

Hi @JM Safe

Thank you very much for your Infos

With best Regards
Mops21

 

[spaceoctopus]

Could you please say to me which file was flagged? Thank you.

Here they are:
c:\program files\minitool shadowmaker\qt5gui.dll
c:\program files\minitool shadowmaker\vdskapi.dll
c:\program files\minitool shadowmaker\zlibwapi.dll

 

[stefanos]

I think zemama need many job to become great again.

 

[Aleeyen]

If I use DNS Jumper to change my DNS then Zemana detects it as DNS hijack.

 

[JM Safe]

Here they are:
c:\program files\minitool shadowmaker\qt5gui.dll
c:\program files\minitool shadowmaker\vdskapi.dll
c:\program files\minitool shadowmaker\zlibwapi.dll

If I use DNS Jumper to change my DNS then Zemana detects it as DNS hijack.

Hey guys, we will look into them

 

[JM Safe]

@spaceoctopus @jogs reported false positives are now fixed

 

[spaceoctopus]

@spaceoctopus @jogs reported false positives are now fixed

@JM Safe Well done!Thank you for this fix

 

[Moonhorse]

MD5 : 9E30EDC57975A66067EC07EE6868592F
Status : Scanned
Object : c:\program files\nvidia corporation\display.nvcontainer\plugins\localsystem\displaydriverras\_displaydriverras.dll
Publisher : NVIDIA Corporation
Size : 2203008
Detection : Suspicious:SRC!P
Action : Quarantine

VirusTotal

 

[JM Safe]

MD5 : 9E30EDC57975A66067EC07EE6868592F
Status : Scanned
Object : c:\program files\nvidia corporation\display.nvcontainer\plugins\localsystem\displaydriverras\_displaydriverras.dll
Publisher : NVIDIA Corporation
Size : 2203008
Detection : Suspicious:SRC!P
Action : Quarantine

VirusTotal

Hello @Moonhorse, thanks for reporting, we will look into it.

 

[eonline]

@JM Safe



Regards!

 

[JM Safe]

@JM Safe

View attachment 212388

Regards!

Hi @Lobito Punky and thank you very much for reporting that.

About mercadolibre site it is not a malicious site but we decided to block it because it could contain unwanted advertisements.

About Smart RSS we will look into it.