Page 1 of 1

[SOLVED] False Positive

Posted: Fri, 17 Feb 2017, 10:14
by tutie
Hello,

When we execute the file downloaded from the following URL, the security soft detect "False Positive".
Please deal with to "False Positive" and add to your Whitelist.

URL : http://www.funaihelp.com/home/file_down ... 102017.exe

Best Regard

Re: False Positive

Posted: Wed, 22 Feb 2017, 15:25
by VirusBuster
Can you please elaborate? How is it detected? can you provide a copy of the antivirus report?

Re: False Positive

Posted: Tue, 28 Feb 2017, 02:25
by tutie
Hello,

The phenomenon, Environment ,Procedure and Attachment file are the following contents.

<phenomenon>
After I execute the download file, the security software immediately detect false positive.

<Environment>
PC:Windows7 Ultimate(64bits)
Connect PC and Router via the Ethernet.

<Procedure>
1) Download the file "KODAKVERITE-PREINSTALLER-v10000-02102017.exe" from the following URL.
URL : http://www.funaihelp.com/home/file_down ... 102017.exe
2) Execute the above file.
3) After detect false positive, the attachement file "Immediately after activating the exe-file.png" is displayed.
And, the above file is deleted.

<Attachement file>
The name of attahcment file is "false positive.zip".
png file : the picure captured the desktop of PC.
txt file : the report file saved from "Event report".
* The above 2 files is compressed with Zip with password.
* The size of the zip file is "845 KB".
* The password sent you via PM.

Re: False Positive

Posted: Tue, 28 Feb 2017, 02:38
by tutie
Hi,

I used the different password by mistake.
I upload the zip file again.
Please confirm the attachment file.

Best Regards,

Re: False Positive

Posted: Wed, 01 Mar 2017, 16:11
by VirusBuster
We have created the case 04499569 for sending this information to our laboratory
We'll keep you updated

Re: False Positive

Posted: Thu, 02 Mar 2017, 05:46
by tutie
Hello,

Thank you for supporting.

Best Regards.

Re: False Positive

Posted: Thu, 02 Mar 2017, 19:05
by VirusBuster
The file has been classified as goodware by digital signature, so it won't be detected again with the next signature update/synchronization

Re: False Positive

Posted: Fri, 03 Mar 2017, 02:17
by tutie
Hello,

I have run the update.
I have just confirmed that the false positive is resolved.

<update information>
before false positive : 2/23/2017 4:33AM
after false positive : 3/2/2017 15:57PM

Thank you for quick your supporting.

Best Regards

Re: False Positive

Posted: Fri, 03 Mar 2017, 12:47
by VirusBuster
ISSUE SOLVED