NANO Antivirus > Forum
http://www.nanoav.pro/forum/

False Positive - Please recheck
http://www.nanoav.pro/forum/viewtopic.php?f=15&t=1301
Страница 1 из 1

Автор:  tealacomer228 [ 10 сен 2015 21:19 ]
Заголовок сообщения:  False Positive - Please recheck

Hi there - we have quite a few products that are being flagged as malicious/trojan and we strongly feel as if these are a false positive. Can you have your team review the exe and get back to us? I really appreciate your assistance.

Flag = Trojan.Nsis.DownLoader12.dqgtta

Thanks so much in advance,
Teala Comer

Вложения:
YTD IE FF.zip [77.05 КБ]
Скачиваний: 936

Автор:  vashaupakovka [ 10 сен 2015 23:28 ]
Заголовок сообщения:  Re: False Positive - Please recheck

Hello tealacomer228.
Please contact by the email company@nanoav.ru to discuss how we can solve the problem.

But I'm not sure that this file will exclude from the definition antivirus.
Analysis of this sample on virustotal:
Изображение

Автор:  Irina [ 16 сен 2015 18:30 ]
Заголовок сообщения:  Re: False Positive - Please recheck

Hi tealacomer228,
Thank you for the notification. We will investigate the file and will report you about the result.

Автор:  Irina [ 22 сен 2015 12:27 ]
Заголовок сообщения:  Re: False Positive - Please recheck

tealacomer228, that one isn't a false positive, but we concluded to mark it as a riskware instead of a trojan.

Автор:  tealacomer228 [ 22 сен 2015 16:33 ]
Заголовок сообщения:  Re: False Positive - Please recheck

@nanoAVteam - Thank you for getting back to me. Can you share with me why it's considered riskware? This implementation only offers software that the user has searched for, and the wrapper only offers an optional Yahoo search set (with Yahoo’s terms of service, and no software installed on the machine), and sometimes an anti-virus/anti-malware product. Are you guys concerned that this is still a riskware? Would you be willing to re-check the implementation? We really appreciate your assistance and would be happy to make any changes you see fit. Please let us know.

Автор:  Irina [ 29 сен 2015 16:38 ]
Заголовок сообщения:  Re: False Positive - Please recheck

Thank you for this information. I asked our virlab about reanalysis proceeding from your explanation. Will report about a result.

Страница 1 из 1 Часовой пояс: UTC + 3 часа
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/