cancel
Showing results for 
Search instead for 
Did you mean: 
zhelev81
Level 7

False P0sitive

I have sent many e-mails with my file which is false positive.Nobody did nothing !

email sent to : virus_research_gateway@avertlabs.com

I wonder how often is this mail checked ! :X

Your  anti-virus detects our game anti-cheat like a (McAfee-GW-Edition6.8.52010.03.06  - Trojan.Dropper.Gen)

Check here pls  : http://www.virustotal.com/analisis/0cbae45a8abd69572ef8e37f1492344810478297bb6afe20f2b5f8b85b9bbcfc-...

file :removed for other users safety

Please somebody to do something and remeve this from your DB !

Message was edited by: zhelev81 on 3/7/10 4:53:49 AM CST

Message was edited by: Ex_Brit on 07/03/10 7:26:52 EST AM
0 Kudos
17 Replies
exbrit
Level 21

Re: False P0sitive

The .exe you posted was removed for safety reasons.

You may have to disable virus protection to do the following:

Not familiar with the email address you are using.

Send the file to Avert for analysis:

http://vil.nai.com/vil/submit-sample.aspx

or

https://www.webimmune.net/default.asp

or

Email  file to: virus_research@avertlabs.com

When  submitting samples via E-mail all samples must be packaged in a .ZIP  file. When creating this .ZIP file, it is important to understand that  the .ZIP can be no more than 3 megabytes in size and can contain no more  than 30 files.

Additionally, any .ZIP file created must  be password-protected using the password "infected" (minus the "").  Failure to follow these guidelines will cause your submission to be  rejected.

Also see *Unofficial* Increase In Size Of Submissions To Threat Center

Message was edited by: Ex_Brit on 07/03/10 7:28:42 EST AM
0 Kudos
zhelev81
Level 7

Re: False P0sitive

I used exactly this mail,and i sent again to it now ... I'm waiting to see if they will reply :X

0 Kudos
exbrit
Level 21

Re: False P0sitive

OK, good luck.

0 Kudos
zhelev81
Level 7

Re: False P0sitive

still nothing i keep sending mails and nobody does anything :X

http://www.virustotal.com/analisis/0cbae45a8abd69572ef8e37f1492344810478297bb6afe20f2b5f8b85b9bbcfc-...

this is the report

0 Kudos
SamSwift
Level 12

Re: False P0sitive

Hi,

What's the analysis ID for the sample?

Sam

0 Kudos
zhelev81
Level 7

Re: False P0sitive

where do i see it ? i just send the file to the mail ,but i never get answered ...

help ?

0 Kudos
SamSwift
Level 12

Re: False P0sitive

How big is the file that you are sending us?

Sam

0 Kudos
zhelev81
Level 7

Re: False P0sitive

it's 4.57 mb ... i cannot sent it directly because it's rejecting it ... so i did a pass protected zip and i uploaded it on my ftp ..and gave you the linkto the file ....

0 Kudos
SamSwift
Level 12

Re: False P0sitive

Can you send the link to virus_research@avertlabs.com please with the word FALSE in the subject line please. 

Then can you send me the email address you are sending it from and I'll ask one of the team to look at it.

It may also be helpful for you to send us over any of your clean files which are currently not being detected, so that we can add them to the false test to avoid any future issues. Please follow KB66642 - please note, this process is not for files which are being detected in our current dats.

Cheers,

Sam

0 Kudos