I downloaded a android file restoration software called "dr.fone for android". The norton did not detect any virus when i installed. After few months, it detected following tmp file. Is this false positive? I want to know if I should format my PC. It deleted the file but I want to know if i should still be worried.
Could be, since the program doesn't look reputable.
Plus, try uploading the file to virus total.
Thanks
Hi Math_pie,welcome to the forum
I have done a search on this RAAPC (Reflexive Arcade Anti Protection Center)This is a crack-these are" DANGEROUS"As they contain
VIRUS.If I was you,I would advice NOT to download this as they will INFECT your pc.This is just my advice to you but you have a last say.Ihope this helps you.
Kind regards Stoneheart
Hi math_pie:
I wouldn't submit "cracks" to VirusTotal.
Just my two cents.
Hi Math_pie
Since you opened up that file, I would suggest running a scan with the free version of Malwarebytes to make sure you didn't catch any parts of that Trojan. Please post the log here after the scan using the add attachments under the post button. Thanks
Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.
You can find Malwarebytes here
http://www.filehippo.com/download_malwarebytes_anti_malware/
It is a safer location to get the program from than malwarebytes themselves because the malware writers some times block the security programs' websites.
Hi floplot:
You wrote:
"It is a safer location to get the program from than malwarebytes themselves because the malware writers some times block the security programs' websites."
Perhaps the malware people even know the other distribution sites by now.
Hi
So far as I know, people have been successful getting the program from that site when they haven't been successful from getting it directly from Malwarebytes. I haven't seen any complaints yet about not being able to get it from that site. When you get the program from a different site, the malware writers don't know where you got the program from. It's possible that in some future time, that may happen, but I don't think it's happened yet.
Well, it looks like RAAPC is in a conflicted state. Most antivirus programs ignore it, but a few catch it. Here is the report:
a-squared 4.5.0.43 2009.12.22 Virus.Win32.Delf!IK
AhnLab-V3 5.0.0.2 2009.12.22 -
AntiVir 7.9.1.122 2009.12.22 -
Antiy-AVL 2.0.3.7 2009.12.22 -
Authentium 5.2.0.5 2009.12.22 -
Avast 4.8.1351.0 2009.12.22 -
AVG 8.5.0.427 2009.12.22 -
BitDefender 7.2 2009.12.22 -
CAT-QuickHeal 10.00 2009.12.22 (Suspicious) - DNAScan
ClamAV 0.94.1 2009.12.22 -
Comodo 3332 2009.12.22 -
DrWeb 5.0.1.12181 2009.12.22 -
eSafe 7.0.17.0 2009.12.22 Suspicious File
eTrust-Vet 35.1.7191 2009.12.22 -
F-Prot 4.5.1.85 2009.12.21 -
F-Secure 9.0.15370.0 2009.12.22 Suspicious:W32/Riskware!Online
Fortinet 4.0.14.0 2009.12.22 -
GData 19 2009.12.22 -
Ikarus T3.1.1.79.0 2009.12.22 Virus.Win32.Delf
Jiangmin 13.0.900 2009.12.22 -
K7AntiVirus 7.10.926 2009.12.22 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.12.22 -
McAfee 5839 2009.12.21 -
McAfee+Artemis 5839 2009.12.21 -
McAfee-GW-Ed. 6.8.5 2009.12.22 Heuristic.LooksLike.Win32.Suspicious.C
Microsoft 1.5302 2009.12.22 -
NOD32 4709 2009.12.22 -
Norman 6.04.03 2009.12.22 W32/Banker.EWMJ
nProtect 2009.1.8.0 2009.12.22 -
Panda 10.0.2.2 2009.12.15 -
PCTools 7.0.3.5 2009.12.22 Trojan.Generic
Prevx 3.0 2009.12.22 -
Rising 22.27.01.04 2009.12.22 -
Sophos 4.49.0 2009.12.22 -
Sunbelt 3.2.1858.2 2009.12.22 -
Symantec 1.4.4.12 2009.12.22 Trojan Horse
TheHacker 6.5.0.3.103 2009.12.22 -
TrendMicro 9.120.0.1004 2009.12.22 -
VBA32 3.12.12.0 2009.12.22 -
ViRobot 2009.12.22.2102 2009.12.22 -
VirusBuster 5.0.21.0 2009.12.22 -
I've seen my friends use this program before, though, and it didn't cause any problems for them.
BTW, thanks everyone for such quick responses.
All of the programs that do think it is a virus are non-compliant with each other
Hi math_pie
Try malwarebytes or superantispyware and see if they come up with anything.. It is not a good idea to run more than 1 real time antivirus program nor should there be more than one installed on your computer. Every antivirus program will come up with different viruses because their engines are not all created equal and the same thing happens as far as removal goes also. That is why we recommend also scanning with programs like the free versions of malwarebytes and superantispyware.
Hello floplot:
I only have NIS 2010 on my computer. I just uploaded it to Virustotal to get the long list of antivirus scan detections
It's just I don't know which data to go with or against
Hi math_pie
Since you are not sure if it is a virus or not, downloading, installing, updating and running a full scan with malwarebytes should relieve you of any doubts. If the malwarebytes scan comes up clean, then you are probably ok unless you got some virus that can be hidden from malwarebytes also. That's why there are programs like malwarebytes, to run double checks and to help keep your computer clean. It's perfectly safe to install a program like the free version of malwarebytes as long as you get it from a reputable site.
If one or two non reputable flags the products, it could be a false positive. If there is more than two, the file should be viewed with suspicion.