Cannot submit False-Positive

Have file ostensibly being falsely flagged as Win32/TrojanDownloader.Agent.QQC. When I attempt to move the item from Quarantine, it is deleted (re-flagged) and moved back to quarantine.

I would like to submit this F/P to ESET but cannot at this time.

Any suggestions ?

Thanks.

 

what file is it, where is it located? Exclude temporarily from scanning that location. Restore the file and submit it

 

I would sooner not disclose what the file is, it is an *.exe file located in documents and settings under a Win XP Pro SP3 Machine fully patched | Browser IE8 | EAV current version | Various layered security countermeasures |

I will take it under advisement to exclude that directory in order to submit to ESET.

Location of suspect file:

Code:

C:\Documents and Settings\siljaline\My Documents\.... Win32/TrojanDownloader.Agent.QQC trojan - cleaned by deleting - quarantined

Cheers, Cudni

 

Just disable NOD32 move it back from Quarantine and ZIP up a copy with what ever ZIP program you use and use a password "infected" without the Quotes and send it to ESET!

TH

 

We found out that action does not always work it's in one of the threads here! It's best to manually send the ZIPPED file to ESET samples@eset.com

TH

 

I had the same problem today with an *.exe file ,but I deleted this file from quarantine ;then I performed a deep scan to my pc and no infection was found .
could that be a false positive ?!

PS:I use Eset smart security 4

 

@Derek
I've submitted the suspect file via ThreatSense as it was detected during a scheduled av scan, I await feedback from ESET.

Thanks for the tip, mate. Whatever else that has been suggested other than you and Cudni, I will ignore, as the user is ignored.

 

You may be best served in starting a new topic although your issue may be similar.

Thanks !

 

I recommend sample@eset.sk. instead of sample@eset.com. I tried to sent those files to sample@eset.com last month and until today I still don't get any response yet.PM to Marcos but he never reply me.

 

The files you submitted seem to be clean. Both email addresses work fine.

 

Thanks for the reply but why ESET took so long to reply me?Even it is clean,ESET should inform me.

 

Sometimes it's impossible to tell quickly if a file is malicious or benign and an in-depth analysis may take days.