AV False positives, part 1 - SecureAnywhere

According to VirusTotal, this file is not malware:

https://www.virustotal.com/en/file/74ab0b9068ef46db6f3acb04c17963fa8e99f23ee0d603559faca4fd720c1c8f/analysis/1406491025/

If you scan whole disk drives without confirming action for every file that gets detected, you may get in trouble... at least, I would recommend to choose "quarantine" as default action.

-----------------------------------------------------------------------------------------------------

Now, according to SecureAnywhere, Portable LibreOffice (Framakey version) also contains malware:

Well, according to VirusTotal, those files are not really malicious...

• passwordcontainer.uno.dll is in fact packed, 2 detections out of 53

https://www.virustotal.com/en/file/4ae9daed6ef23e760df5fa9624671311be148c3c9c3fc46d0950180e090385dc/analysis/1406491597/

• xmlsecurity.dll: 0 detection

https://www.virustotal.com/en/file/bdfc4ae06126ce9ca2dbaea1cf5cad145e69263fba09d8471d1a521a8e2a1b5c/analysis/1406491784/

• filterconfig1.dll: 4 detections

https://www.virustotal.com/en/file/e22eddbd8f1969285bb02c6d0ad3e99679e1724be2cb513b38c5d1afe3815350/analysis/1406491867/

Generic/heuristics ones, not sure this is really reliable.

• ucpext.uno.dll: 0 detection

https://www.virustotal.com/en/file/ddc43f9e0fd81949cef8d681597e6aa3753df6b4031c91fcef0a4bbb09df86d2/analysis/1406492520/

• itimi.dll: 0detection

https://www.virustotal.com/en/file/722329602ca2fecff5852ab7441251b8d964d63bfeccb4542b945dd91e8f409f/analysis/1406492678/

• fsstorage.uno.dll: 2 detections

It is in fact packed, most likely using UPX.

https://www.virustotal.com/en/file/34a3a6dac3093393976823d4b6587b1a8d0013b54896ce919bca769acfc069fc/analysis/1406492765/

2 generic detections...

• iptmi.dll: 0 detection

https://www.virustotal.com/en/file/591821f820ee7ae6488fcb068de1eab90d4e41eed96dbb554b25807a5281a8d8/analysis/1406493017/

• python.exe: 3 detections

https://www.virustotal.com/en/file/188af5234224d8d467a1ce6e90fac772d6277ea6840f3e4c0e11fe24b6319663/analysis/1406494365/

All of those results were with a (quite) old version of Portable LibreOffice, pas per the file properties:

Now, here is what SecureAnywhere says regarding the latest available version of Portable LibreOffice (from here: http://framakey.org/Portables/LibreOfficePortable): still 2 detections!

According to VT,

• wininst-6.0.exe: 5 detections

File is UPX packed...

• python.exe: same as before, 3 detections on VT.

File is UPX packed..