False Positive or not?

[David H. Lipman]

From: "Buffalo" <Eric@nada.com.invalid>

| MBAM lists Winnit\System32\Sysrestore.dll from Rogue.Ascentive Performance
| as malware. I submitted the file to VirusTotal and the results were
| negative. I now have that file in quarantine.
| Anyone have any other info on this?
| Rogue.AscentivePerformance
| Date spotted:
| First seen on 2008-10-04.
| Last seen on 2009-01-06.

| Detection statistics:
| This object is 0.08% of all objects detected.
| 424,252 instances detected worldwide.



What was the result of submitting Sysrestore.dll to Virus Total ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Buffalo]

David H. Lipman wrote:
> From: "Buffalo" <Eric@nada.com.invalid>
>
>> MBAM lists Winnit\System32\Sysrestore.dll from Rogue.Ascentive
>> Performance as malware. I submitted the file to VirusTotal and the
>> results were negative. I now have that file in quarantine.
>> Anyone have any other info on this?
>> Rogue.AscentivePerformance
>> Date spotted:
>> First seen on 2008-10-04.
>> Last seen on 2009-01-06.
>
>> Detection statistics:
>> This object is 0.08% of all objects detected.
>> 424,252 instances detected worldwide.
>
>
>
> What was the result of submitting Sysrestore.dll to Virus Total ?
All negative.

[Buffalo]

David H. Lipman wrote:
> From: "Buffalo" <Eric@nada.com.invalid>
>
>> MBAM lists Winnit\System32\Sysrestore.dll from Rogue.Ascentive
>> Performance as malware. I submitted the file to VirusTotal and the
>> results were negative. I now have that file in quarantine.
>> Anyone have any other info on this?
>> Rogue.AscentivePerformance
>> Date spotted:
>> First seen on 2008-10-04.
>> Last seen on 2009-01-06.
>
>> Detection statistics:
>> This object is 0.08% of all objects detected.
>> 424,252 instances detected worldwide.
>
>
>
> What was the result of submitting Sysrestore.dll to Virus Total ?

Nothing found. All negative.