possible FalsePositive

[myrtille]

Hi,

I've seen Malwarebytes target QIP as Adware.Sogou, however I believe this to be a false positive as it is a rather popular instant messenger. Could you please take a look at it?

QIP is a russian tool supporting several instant messenging protocols. Its mainsite can be found here: http://www.qip.ru/en/

I downloaded the installer from their site ( direct link) and uploaded it at virustotal.com:

File qip8070.exe received on 09.02.2008 00:40:51 (CET)

Current status: finished

Result: 1/36 (2.78%)

K7AntiVirus 7.10.435 2008.09.01 not-a-virus:AdWare.Win32.Baidu

File size: 2047416 bytes

MD5...: 89e298fbc8c1d1d6bf15da99599f3efa

Link to virustotal results

I ran a scan with Malwarebytes Anti-Malware as well.

Malwarebytes' Anti-Malware 1.25

Datenbank Version: 1103

Windows 6.0.6001 Service Pack 1

00:37:04 02.09.2008

mbam-log-09-02-2008 (00-37-01).txt

Scan-Methode: Quick-Scan

Durchsuchte Objekte: 36728

Laufzeit: 1 minute(s), 32 second(s)

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschl

mbam_log_09_02_2008__00_37_01_.txt

mbam_log_09_02_2008__00_37_01_.txt

[nosirrah]

fixed in next update

[myrtille]

fixed in next update

Thank you very much!

myrtille

[myrtille]

Hi,

I just noticed, that the uninstaller of qip.exe still seems to be targeted:

Malwarebytes' Anti-Malware 1.30

Datenbank Version: 1399

Windows 6.0.6001 Service Pack 1

15.11.2008 12:18:25

mbam-log-2008-11-15 (12-18-10).txt

Scan-Methode: Quick-Scan

Durchsuchte Objekte: 1

Laufzeit: 5 second(s)

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschl

[Raid]

Hi,

I just noticed, that the uninstaller of qip.exe still seems to be targeted:

greets myrtille

Hi myrtille,

It's indeed a false positive and I will have it corrected soon. thanks.

[myrtille]

Hi myrtille,

It's indeed a false positive and I will have it corrected soon. thanks.

Thanks for the quick reply

greets myrtille