PDA

View Full Version : False Detection in PE-File?


Whissi
October 31st, 2006, 07:53 AM
Hello,

try to download this programm: hXXp://www.xdi-developergroup.de/?d=projects&p=webdev

NOD32 says: {QUOTE->
31.10.2006 13:39:18 IMON archive hXXp://www.xdi-developergroup.de/download/webdev.2.6.a.rar probably unknown NewHeur_PE virus Connection terminated <-QUOTE}

I checked the file using virustotal.com, the result: Only NOD32 says "Infected".

covaro
October 31st, 2006, 11:10 AM
@Whissi

Did you submit the file to samples@eset.com? Also, if not, provide them a link to this thread when you submit it.

-Cov

Marcos
October 31st, 2006, 11:12 AM
Not necessary, I've received the file from several sources.

aigle
October 31st, 2006, 11:30 AM
So is it really a false positive?

shanijee
November 1st, 2006, 02:37 AM
today i checked the file
file is clean as other antivirus says
but web site looks suspicious

pykko
November 3rd, 2006, 04:39 AM
well, and the conclusion is: "The file is..." ? ? ?