ImproMed Infinity False Positives

[rwanauo]

Several files from a program we make have suddenly started showing up as infected. Or support department started noticing it a week or two ago. I have tested it here in house on a known clean machine (freshly setup) and these same files show up as infected with "backdoor.bot"

C:\Program Files\Infinity\DatabaseInterface.ocx (Backdoor.Bot) -> No action taken. [433A08ED0C34D69053DFCEF5070D4E72]

C:\Program Files\Infinity\ImpLabREXX.dll (Backdoor.Bot) -> No action taken. [433A08ED0C34D69053DFCEF5070D4E72]

Their accossiated COM registry keys also show up as infected.

These files and the install media have been checked by several other scanners and come back clean.

Full log attached.

If more information is needed, please let me know.

Thanks

ryan

mbam_log_2010_11_16__14_30_30_.zip

[nosirrah]

Please zip and attach a copy of ImpLabREXX.dll to your next post.

[rwanauo]

Please zip and attach a copy of ImpLabREXX.dll to your next post.

Here is the file zipped.

Thanks

Ryan

ImpLabREXX.zip