View Full Version : False positive on newly compiled binary
brianras
September 22nd, 2008, 06:19 AM
Hello,
I develop several products in C++Builder 2007, and a few days go NOD32 started detecting a virus in my application just after I have compiled it. The message is "probably unknown NewHeur_PE_virus".
There is no virus in the file.
This affects my business. I already submitted it to the "samples" email address. Automatically submitting the file from NOD32 failed with no explanation other than "it failed".
Can I do anything to speed up the process of getting you guys to analyze this problem?
Marcos
September 22nd, 2008, 06:37 AM
Please send the sample in a rar/zip archive protected with the password "infected" and "False positive" in the subject to samples[at]eset.com. If the file is part of an application, provide as much information about it as possible and enclose a link to it as well, if possible.
emailaya
September 22nd, 2008, 07:11 AM
{QUOTE-> Hello,
I develop several products in C++Builder 2007, and a few days go NOD32 started detecting a virus in my application just after I have compiled it. The message is "probably unknown NewHeur_PE_virus".
There is no virus in the file.
This affects my business. I already submitted it to the "samples" email address. Automatically submitting the file from NOD32 failed with no explanation other than "it failed".
Can I do anything to speed up the process of getting you guys to analyze this problem? <-QUOTE}
you might had the same problem as i did (even the same "virus" name). i got a PM about fixing this issue, waiting for my users to confirm that
brianras
September 22nd, 2008, 07:20 AM
{QUOTE-> you might had the same problem as i did (even the same "virus" name). i got a PM about fixing this issue, waiting for my users to confirm that <-QUOTE}
I'd love to try it, please let me know what I can do.
brianras
September 22nd, 2008, 07:28 AM
{QUOTE-> Please send the sample in a rar/zip archive protected with the password "infected" and "False positive" in the subject to samples[at]eset.com. If the file is part of an application, provide as much information about it as possible and enclose a link to it as well, if possible. <-QUOTE}
Done.
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums