False positive for PVM (Parallel Virtual Machine) library

[Jeff Lawson]

The PVM (Parallel Virtual Machine) library is falsely
detected as an unrelated dialer that also goes by the name
"PVM".

You can download the real PVM from
http://www.netlib.org/pvm3/win32/ You can read more about
PVM at http://www.csm.ornl.gov/pvm/

Here is the false report from Microsoft AntiSpy:

-----

PVM Dialer Dialer more information...
Details: PVM Dialer changes your modem's dial-up settings
and attempts to connect to a premium or international phone
number to access adult material.
Status: Ignored
Severe threat - Severe threats typically are remotely
exploitable vulnerabilities, which can lead to system
compromise. Successful exploitation does not normally
require any interaction and exploits are in the wild. There
exists a high possibility of potential system damage or
security flaw. Attacker has complete control over your
computer or install new software on your machine.

Infected registry keys/values detected
HKEY_LOCAL_MACHINE\Software\PVM
HKEY_LOCAL_MACHINE\Software\PVM PVM_FINCLUDE
HKEY_LOCAL_MACHINE\Software\PVM PVM_FLIBDIR
HKEY_LOCAL_MACHINE\Software\PVM PVM_VERSION 3.4.3
HKEY_LOCAL_MACHINE\Software\PVM PVM_MAJOR_VERSION 3
HKEY_LOCAL_MACHINE\Software\PVM PVM_MINOR_VERSION 4
HKEY_LOCAL_MACHINE\Software\PVM PVM_PATCH_VERSION 3
HKEY_LOCAL_MACHINE\Software\PVM PVM_ROOT C:\PROGRA~1\PVM3.4
HKEY_LOCAL_MACHINE\Software\PVM PVM_TMP c:\tmp
HKEY_LOCAL_MACHINE\Software\PVM PVM_ARCH WIN32
HKEY_LOCAL_MACHINE\Software\PVM PVM_CCOMPILER VISUALC++6.0
HKEY_LOCAL_MACHINE\Software\PVM PVM_CBIN
c:\PROGRA~1\MICROS~4\vc98\bin
HKEY_LOCAL_MACHINE\Software\PVM PVM_CINCLUDE
c:\PROGRA~1\MICROS~4\vc98\include
HKEY_LOCAL_MACHINE\Software\PVM PVM_CLIBDIR
c:\PROGRA~1\MICROS~4\vc98\lib
HKEY_LOCAL_MACHINE\Software\PVM PVM_FCOMPILER NONE

 

[Bill Sanderson]

If you are in touch with anyone who can speak authoritatively for the
development group, the direct form for reporting false positives can be
found here:

http://www.spynet.com/falsepositive.aspx