PDA

View Full Version : Submitting large false positive?


edwin3333
January 27th, 2009, 05:59 PM
Nod32 has started to detect Novell Zenworks 10 ZCM agent as "a Variant of Win32/Spy.AGent.PZ trojan"

Considering Zenworks 10 is installed on 99% of our PC's and how integrated it is into the OS, this could be a bad thing.

I see Marco's states to send these to "samples[at]eset.com with "Probable false positive" in the subject."

But this sample is 120MB zipped up, and I don't think I can send that large an attachment.

Is there an alternate way to submit this?

funkydude
January 27th, 2009, 06:01 PM
Try this: http://www.wilderssecurity.com/showpost.php?p=1381799&postcount=21

I would send an email to samples stating you've uploaded the file & all other info.