cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

False P0sitive

I have sent many e-mails with my file which is false positive.Nobody did nothing !

email sent to : virus_research_gateway@avertlabs.com

I wonder how often is this mail checked ! :X

Your  anti-virus detects our game anti-cheat like a (McAfee-GW-Edition6.8.52010.03.06  - Trojan.Dropper.Gen)

Check here pls  : http://www.virustotal.com/analisis/0cbae45a8abd69572ef8e37f1492344810478297bb6afe20f2b5f8b85b9bbcfc-...

file :removed for other users safety

Please somebody to do something and remeve this from your DB !

Message was edited by: zhelev81 on 3/7/10 4:53:49 AM CST

Message was edited by: Ex_Brit on 07/03/10 7:26:52 EST AM
17 Replies
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 2 of 18

Re: False P0sitive

The .exe you posted was removed for safety reasons.

You may have to disable virus protection to do the following:

Not familiar with the email address you are using.

Send the file to Avert for analysis:

http://vil.nai.com/vil/submit-sample.aspx

or

https://www.webimmune.net/default.asp

or

Email  file to: virus_research@avertlabs.com

When  submitting samples via E-mail all samples must be packaged in a .ZIP  file. When creating this .ZIP file, it is important to understand that  the .ZIP can be no more than 3 megabytes in size and can contain no more  than 30 files.

Additionally, any .ZIP file created must  be password-protected using the password "infected" (minus the "").  Failure to follow these guidelines will cause your submission to be  rejected.

Also see *Unofficial* Increase In Size Of Submissions To Threat Center

Message was edited by: Ex_Brit on 07/03/10 7:28:42 EST AM

Re: False P0sitive

I used exactly this mail,and i sent again to it now ... I'm waiting to see if they will reply :X

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 4 of 18

Re: False P0sitive

OK, good luck.

Re: False P0sitive

still nothing i keep sending mails and nobody does anything :X

http://www.virustotal.com/analisis/0cbae45a8abd69572ef8e37f1492344810478297bb6afe20f2b5f8b85b9bbcfc-...

this is the report

SamSwift
Level 12
Report Inappropriate Content
Message 6 of 18

Re: False P0sitive

Hi,

What's the analysis ID for the sample?

Sam

Re: False P0sitive

where do i see it ? i just send the file to the mail ,but i never get answered ...

help ?

SamSwift
Level 12
Report Inappropriate Content
Message 8 of 18

Re: False P0sitive

How big is the file that you are sending us?

Sam

Re: False P0sitive

it's 4.57 mb ... i cannot sent it directly because it's rejecting it ... so i did a pass protected zip and i uploaded it on my ftp ..and gave you the linkto the file ....

SamSwift
Level 12
Report Inappropriate Content
Message 10 of 18

Re: False P0sitive

Can you send the link to virus_research@avertlabs.com please with the word FALSE in the subject line please. 

Then can you send me the email address you are sending it from and I'll ask one of the team to look at it.

It may also be helpful for you to send us over any of your clean files which are currently not being detected, so that we can add them to the false test to avoid any future issues. Please follow KB66642 - please note, this process is not for files which are being detected in our current dats.

Cheers,

Sam

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community