topic Re: False Positive - Virus/Win32.WGeneric.ackhks in VirusTotal

False Positive - Virus/Win32.WGeneric.ackhks

namaadmin — Fri, 02 Aug 2019 09:52:44 GMT

Name: 29072019-CHIPHI.xlsx

Detection name: Virus/Win32.WGeneric.ackhks

SHA256: 1de240b2651e76fe40a5c83edc60b339b56c668702c1059d26219d231e221239

VirusTotal URL: https://www.virustotal.com/gui/file/1de240b2651e76fe40a5c83edc60b339b56c668702c1059d26219d231e221239/detection

Description: threat ID 280198281

Re: False Positive - Virus/Win32.WGeneric.ackhks

DaBone — Fri, 02 Aug 2019 23:48:09 GMT

Hello,

The file for hash:

1de240b2651e76fe40a5c83edc60b339b56c668702c1059d26219d231e221239

Is seen as benign by us.

The TID: you referenced is for an Eicar file.

Name: Virus/Win32.WGeneric.ackhks

Unique Threat ID: 280198281

Re: False Positive - Virus/Win32.WGeneric.ackhks

namaadmin — Mon, 05 Aug 2019 07:42:01 GMT

Hello

I wonder why our Firewall (PA 3050, OS 9.0.1) block this file (sha256 is 1de240b2651e76fe40a5c83edc60b339b56c668702c1059d26219d231e221239) with TID 280198281 (threat vault state that sha256 is 7c66b9098165e596106652d60375d8072ba62247f674f3f1317e2a433d4af8b9)

Currently if we enable check virus, many user can not send mail because of virus block

Re: False Positive - Virus/Win32.WGeneric.ackhks

namaadmin — Mon, 05 Aug 2019 08:06:20 GMT

There are a lot of files blocked with

Virus/Win32.WGeneric.acqoie(281377302)
Virus/Win32.WGeneric.acwjkv(283342743)
Virus/Win32.WGeneric.ackhks(280198281)
virus/MS EXCEL.sic.czp(262579026)

Re: False Positive - Virus/Win32.WGeneric.ackhks

DaBone — Tue, 06 Aug 2019 02:00:24 GMT

If this is occurring with your firewall, please contact support and create a case.