Marking files as false positives

[Baz_kasp]

One of my relatives is using Prevx on their netbook at my reccomendation. Their last scan showed that acs.exe is a malware and should be removed. Luckily before they removed it they gave me a call, and I realised that acs.exe is a component related to their atheros wifi card.

Obviously going through the save a scan log and send it to X was a bit much to do over the phone whilst driving so I told them to right click and mark the file as a false positive.

My question is, if a file is marked as a false positive, is any kind of indication sent back to PX so that it can be verified and removed if indeed found to be false, or is it just a local override?

[trjam]

Originally Posted by Baz_kasp

One of my relatives is using Prevx on their netbook at my reccomendation. Their last scan showed that acs.exe is a malware and should be removed. Luckily before they removed it they gave me a call, and I realised that acs.exe is a component related to their atheros wifi card.

Obviously going through the save a scan log and send it to X was a bit much to do over the phone whilst driving so I told them to right click and mark the file as a false positive.

My question is, if a file is marked as a false positive, is any kind of indication sent back to PX so that it can be verified and removed if indeed found to be false, or is it just a local override?

Now explain why that releative isnt using Kaspersky? Mother-in-law? Totally understandable.

[Fajo]

Originally Posted by Baz_kasp

One of my relatives is using Prevx on their netbook at my reccomendation. Their last scan showed that acs.exe is a malware and should be removed. Luckily before they removed it they gave me a call, and I realised that acs.exe is a component related to their atheros wifi card.

Obviously going through the save a scan log and send it to X was a bit much to do over the phone whilst driving so I told them to right click and mark the file as a false positive.

My question is, if a file is marked as a false positive, is any kind of indication sent back to PX so that it can be verified and removed if indeed found to be false, or is it just a local override?

You can right click the file and have it sent to prevx as a false positive, They are normally pretty quick about getting that resolved. I also believe when its marked as a false positive its automatically sent to prevx for analysis.

[PrevxHelp]

Originally Posted by Baz_kasp

My question is, if a file is marked as a false positive, is any kind of indication sent back to PX so that it can be verified and removed if indeed found to be false, or is it just a local override?

It is - FPs will be fixed very quickly if they are of any volume but it is possible for single reports to be buried down. I'll keep an eye out for the acs.exe file, however - we have a few thousand acs.exe's that are definitely bad (looks to be a popular infection from hidden registry keys) but we should have it fixed for all users as soon as we find which file it is referring to.

[Baz_kasp]

Originally Posted by trjam

Now explain why that releative isnt using Kaspersky? Mother-in-law? Totally understandable.

Aunt, actually

It's a teeny weeny toshiba netbook, so I didn't want to burden it wil a full blown clientside av. Prolongs the battery life and allows it to be more responsive imo.