2m^2
I have also uploaded it here:
http://cid-e12762cbdafb3c47.skydrive.live.com/self.aspx/TC/TCMC%7C_u.7z
About TCMC...
Moderators: Hacker, petermad, Stefan2, white
- fenix_productions
- Power Member
- Posts: 1979
- Joined: 2005-08-07, 13:23 UTC
- Location: Poland
- Contact:
Thanks. I got it!.nsp wrote:You can get tcmc_u.7Z on free download share
2m^2
Why so many executables?. Is it because the decompressed version also is seen as virus by some scanners?.
It's because I saw the .pdf that I made such guess. There's no text that explicity says it, so I ask for confirmation.m^2 wrote:See the pdf inside.
It's just that I though that the problems with antiviruses where related with the UPX packer, normally they don't like programs that execute data.
Nevertheless, I'll take your answer as confirmation.

Hello, m^2.
Sorry for reviving a really old post just to say "thanks for a really useful tiny programme which does not exhibit any malicious behaviour" and to confirm that nothing much has changed during the past 2 years:
If this were an executable published by a large company, I bet, all of these false positives would have disappeared 48 months ago.
Oh, by the way, the best choice in order to avoid false positives by your AV seems to be using the 10 KB size executable version taken from Sombra's 7z archive.
Cheers,
Karl
Sorry for reviving a really old post just to say "thanks for a really useful tiny programme which does not exhibit any malicious behaviour" and to confirm that nothing much has changed during the past 2 years:
My Avira still likes your original upacked exe-file. But 23 out of 43 don't.: still the same old story, verdicts based on identification of exe-packer or paranoid heuristical analysis or no reason given at all, which very likely is meant to camouflage one of the first two reasons for flagging tcmc.exe suspicious.m^2 wrote:In the meantime I'm discussing with AV crew about packed TCMC.
F-Secure, Sophos, TrendMicro reviewed the file already and said OK, but didn't update the definitions yet.
Prevx, McAffe - both want me to buy their products, but I think we'll solve the problem another way.
The other 12 companies didn't contact me yet.
If this were an executable published by a large company, I bet, all of these false positives would have disappeared 48 months ago.
Oh, by the way, the best choice in order to avoid false positives by your AV seems to be using the 10 KB size executable version taken from Sombra's 7z archive.
Cheers,
Karl