2 Replies Latest reply on May 6, 2009 12:22 AM by patheticcockroach

    False positive

      As most (if not all) stuff compressed with UPX, the following program is detected as some virus while it's definitely not: http://mpam.free.fr/Apps/Files/MTTFWin.zip
      I saw some other false positive reports on this forum so I thought this was the place to post it, please point me to the right direction if I'm wrong happy
        • 1. RE: False positive
          No one here can fix false positives but the Avert link below should help you out:

          How to submit a sample to AVERT

          If the file has been placed in Quarantine, you'll have to temporarily disable VirusScan and then reinstate the items and send them to Avert.

          Send the file to Avert for analysis:
          http://vil.nai.com/vil/submit-sample.aspx
          or
          https://www.webimmune.net/default.asp
          or
          Email file to: [EMAIL="virus_research@avertlabs.com"]virus_research@avertlabs.com
          When submitting samples via E-mail all samples must be packaged in a .ZIP file. When creating this .ZIP file, it is important to understand that the .ZIP can be no more than 3 megabytes in size and can contain no more than 30 files. Additionally, any .ZIP file created must be password-protected using the password "infected" (minus the ""). Failure to follow these guidelines will cause your submission to be rejected.

          Hope this helps.

          Grif
          • 2. RE: False positive
            Thanks, that's just what I needed happy The reason why I didn't find this "How to submit a sample to AVERT" page is because I search for "false positive" and the page doesn't contain either of these words...