Results 1 to 6 of 6

Thread: Possible False Positive?

  1. #1
    dbled Guest

    Default Possible False Positive?

    Yesterday after my scheduled scan, ZAAV 7.0.470 showed the following
    detected virus:"not-a-virus Downloader Win32 Swift Cleaner b"The path shown was C:\...\Popfile\uninstall.exePopfile is an open source Baysean email sorting program. It's been on my computer for many months and yesterday was the first
    time that ZAAV flagged it as a virus.I'm wondering if new antivirus defs have wrongly flagged this file as a virus.Any ideas or suggestions?Thanks




    Operating System:Windows XP Home Edition
    Software Version:7.0
    Product Name:ZoneAlarm Antivirus

  2. #2
    hammernu Guest

    Default Re: Possible False Positive?

    Almost certainly a false positive triggered by the new signature update. Same thing happened to me with a timer program called Countdown Clock.

    Report malware or false positive/negative to technical support

    http://smartdefense.zonelabs.com/tmp...cReporting.jsp

  3. #3
    dbled Guest

    Default Re: Possible False Positive?

    Thanks for the
    reply.The link you gave is for reporting spyware issues. The drop down boxes and other requested into on that page
    doesn't let me enter
    virus info or any antivirus product info.

    .Should I just go ahead and do it anyway or in there another link for virus reporting?I looked all over the ZA page for reporting links, but they seem to be better at hiding it than I am at finding it.Thanks again

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Possible False Positive?

    Hi!
    that is a Kaspersky detection. Usually 'not a virus' are rarely false positives.

    First upload the file to www.virustotal.com to double check only KAV detects it.
    Then send an e-mail to newvirus at kaspersky dot com. Subject: false positive. Attach the file in a password protected zip. Include the password in the e-mail.

    If it is a false positive you will hear back from the malware specialist.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    dbled Guest

    Default Re: Possible False Positive?

    fax -Thanks for the replyI did as you suggested:First I scanned the file at www.virustotal.com
    (What a great link - thanks for that)
    - only Kaspersky flagged the Popfile "uninstall.exe" file as the "not-a-virusownloader.Win32.SwiftCleaner.b" virus.I then sent the zipped file to Kaspersky to the email address you provided.A few hours later I got an email back that essentially said '
    Kaspersky has identified "not-a-virusownloader.Win32.SwiftCleaner.b"
    as a virusThey seemingly ignored
    the "false positive" issue. I wrote some more verbage and resent the email
    I'm
    convinced that scanning
    the PopFile "uninstall.exe" gives a false positive so
    I guess if Kaspersky doesn't come through with a satisfactory answer,
    I'll
    set ZAAV to ignore the Popfile "uninstall.exe" file during scans


  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Possible False Positive?

    Hi!
    did you password protected the ZIP?
    Otherwise it will be filter out by the e-mail system at Kaspersky.

    Remember to include password in the e-mail.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •