WCMICONS.DLL identified as Broken.Executable by Clam AntiVir

[jenderek]

The Clam AntiVirus suite (Version 0.93.3clamav)
gives a false positive:
Programme/totalcmd7.04/WCMICONS.DLL: Broken.Executable FOUND

The DLL is identified as suspicion file by ClamAV, but it is not malware.
WCMICONS.DLL is part of Total Commander (version 7.04a)
The file is used to change the shown icons (toolbar) of the Commander.
As far i can remember this messages also occured in older versions of the 2 programs.

[roentgen]

Not here:

Code: Select all

Scan Started Fri Oct 24 18:48:28 2008
-------------------------------------------------------------------------------


C:\TotalCMD\Plugins\Tools\DupSel\DupSel.exe: Worm.Autoit-30 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 447792
Engine version: 0.94
Scanned directories: 378
Scanned files: 2101
Infected files: 1

Data scanned: 231.48 MB
Time: 169.543 sec (2 m 49 s)
--------------------------------------
Completed
--------------------------------------

PS: I don't think ClamAV qualifies for a suite

[sas2000]

 
Not here (KIS 2009) :

WCMICONS.DLL - Sha1: 4748A79CE0A930ED575B3503FDE4871B53103BC2 = CLEAN
 
Sent to http://virusscan.jotti.org/ = CLEAN

Code: Select all

File: 	WCMICONS.DLL 
Status: 	OK 
MD5: 	326060071ef65a79744d1b813f244a05 
Packers detected: 	-

Scanner results 
Scan taken on 25 Oct 2008 13:40:45 (GMT) 
A-Squared 	Found nothing
AntiVir 	Found nothing
ArcaVir 	Found nothing
Avast 	Found nothing
AVG Antivirus 	Found nothing
BitDefender 	Found nothing
ClamAV 	Found nothing
CPsecure 	Found nothing
Dr.Web 	Found nothing
F-Prot Antivirus 	Found nothing
F-Secure Anti-Virus 	Found nothing
G DATA 	Found nothing
Ikarus 	Found nothing
Kaspersky Anti-Virus 	Found nothing
NOD32 	Found nothing
Norman Virus Control 	Found nothing
Panda Antivirus 	Found nothing
Sophos Antivirus 	Found nothing
VirusBuster 	Found nothing
VBA32 	Found nothing

 
"ClamAV           Found nothing"
 

[jenderek]

Forgot to mentition that message only ours with option --detect-broken.
A standard scan with the Clam AntiVirus suite (Version 0.93.3 clamav) detects nothing.

[ghisler(Author)]

Maybe ClamAV has problems with resource-only dlls created with Delphi?