Prevx False Positives

[CiX]

Prevx detect OpenOffice.org Portable file as malware
217975

[shadek]

Does Hitman Pro contain a Prevx module? :o I get it that Hitman scans with different engines 'in the cloud'. Is this module the same as right-clicking-scan on a certain file in Prevx? Because that does not nearly detect as many malware samples as executing it and let Prevx do all layered scans.

[Baz_kasp]

Nice sticky topic at the top of the forum:

http://www.wilderssecurity.com/showthread.php?t=245129

For your reading pleasure ;)

(P.s. In this case you'd probably be better off contacting HitMan)

[erikloman]

-{ Quote: "Prevx detect OpenOffice.org Portable file as malware
217975" }-
I have looked into the problem and if you upload the listed files to VirusTotal then they are also listed there (also Symantec list them). So it isn't a Hitman Pro specific issue.

[Triple Helix]

I agree with Baz_kasp send the files to Prevx via the link he posted and not in the forums because the Prevx Staff wants users to use the Official Channel as stated in that post for any possible FP's!

TH

[Cudni]

-{ Quote: "send the files to Prevx via the link he posted and not in the forums because the Prevx Staff wants users to use the Official Channel as stated in that post for any possible FP's!!
" }-
is there no merit in doing both? That way other users know there is a potential FP and that something will be done about as it is reported.

or maybe have a place where to see already reported false positives

[Triple Helix]

-{ Quote: "is there no merit in doing both? That way other users know there is a potential FP and that something will be done about as it is reported.

or maybe have a place where to see already reported false positives" }-

This is what PrevxHelp said awhile back:http://www.wilderssecurity.com/showpost.php?p=1534535&postcount=384

HTH,

TH

[PrevxHelp]

Hello :)
If you could please send us a scan log or the samples to report@prevxresearch.com, we will correct the FP from there.

For now, I have closed this thread as our policy is to have false positive reports sent directly to us because this forum is used for software support and not for false positive corrections (none of our research team members check this forum so it does not help to submit them here).