Threatfire Temp File

Discussion in 'ESET NOD32 Antivirus' started by Thankful, Jul 19, 2008.

Thread Status:
Not open for further replies.
  1. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Temp file created by Threatfire detected by NOD32 as probable unknown
    NewHeur_PE virus. I have sent file to Eset.
     
  2. ASpace

    ASpace Guest

    Thank you :D :thumb:
     
  3. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Can I get an idea when this will be fixed?
    Running a full scan with Threatfire still triggers an alert from NOD32.

    Thanks.
     
  4. ASpace

    ASpace Guest

    It seems it may never get fixed :(
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could you please PM me the subject of the email as well as the email address the file was sent from? I don't remember receiving such a false positive at samples[at]eset.com
     
  6. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    I don't have the ability to PM. I resent the email this morning. The email was sent to samples@eset.com. The title of the email is [Fwd Probable False Positive]
    The attached file is a 7-Zip file with password 'infected'. The name of the file is
    'EE1D14C0.7Z'
    I would prefer creating the file using Windows XP built-in archive but I don't know how to create a password with the built-in archive.
    The behavior can easily be duplicated by downloading the free version of Threatfire here http://www.threatfire.com/download/ and running a full scan with Threatfire.
     
    Last edited: Jul 22, 2008
  7. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Marcos,

    PM sent.
     
  8. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Any news?

    I have resent the email for a fourth time.
     
    Last edited by a moderator: Jul 24, 2008
  9. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Marcos,

    I submit the file using Eset quarantine submit utility.
     
  10. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    Marcos,

    PM sent.
     
Thread Status:
Not open for further replies.