Prevx False Positives

Discussion in 'Prevx Releases' started by CiX, May 15, 2010.

Thread Status:
Not open for further replies.
  1. CiX

    CiX Registered Member

    Joined:
    Feb 22, 2010
    Posts:
    404
    Prevx detect OpenOffice.org Portable file as malware
    Prevx FP.JPG
     
  2. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    Does Hitman Pro contain a Prevx module? :eek: I get it that Hitman scans with different engines 'in the cloud'. Is this module the same as right-clicking-scan on a certain file in Prevx? Because that does not nearly detect as many malware samples as executing it and let Prevx do all layered scans.
     
  3. Baz_kasp

    Baz_kasp Registered Member

    Joined:
    May 1, 2008
    Posts:
    593
    Location:
    London
  4. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    I have looked into the problem and if you upload the listed files to VirusTotal then they are also listed there (also Symantec list them). So it isn't a Hitman Pro specific issue.
     
  5. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,262
    Location:
    Ontario, Canada
    I agree with Baz_kasp send the files to Prevx via the link he posted and not in the forums because the Prevx Staff wants users to use the Official Channel as stated in that post for any possible FP's!

    TH
     
    Last edited: May 15, 2010
  6. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,963
    Location:
    Somethingshire
    is there no merit in doing both? That way other users know there is a potential FP and that something will be done about as it is reported.

    or maybe have a place where to see already reported false positives
     
  7. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,262
    Location:
    Ontario, Canada
    This is what PrevxHelp said awhile back:https://www.wilderssecurity.com/showpost.php?p=1534535&postcount=384

    HTH,

    TH
     
  8. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Hello :)
    If you could please send us a scan log or the samples to report@prevxresearch.com, we will correct the FP from there.

    For now, I have closed this thread as our policy is to have false positive reports sent directly to us because this forum is used for software support and not for false positive corrections (none of our research team members check this forum so it does not help to submit them here).
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.