topic False positive: Generic.ml in VirusTotal

False positive: Generic.ml

cguide — Wed, 21 Oct 2020 10:28:17 GMT

SHA256: 12bf791d60c30fbaae296d1c06f1b0515cb74e4972c18e6de2f2f0fdff7b32cb Virustotal: https://www.virustotal.com/gui/file/12bf791d60c30fbaae296d1c06f1b0515cb74e4972c18e6de2f2f0fdff7b32cb/detection File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Full.exe SHA256: 9feae7075548a3cac3aa6a9e99fe178b6b682a99e38a9df27b2aaf3ab12872a6 Virustotal: https://www.virustotal.com/gui/file/9feae7075548a3cac3aa6a9e99fe178b6b682a99e38a9df27b2aaf3ab12872a6/detection File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Mega.exe

Re: False positive: Generic.ml

tsullivan7 — Wed, 21 Oct 2020 15:09:30 GMT

Under review.

Re: False positive: Generic.ml

tsullivan7 — Thu, 22 Oct 2020 14:13:59 GMT

We have changed sample to benign.

Re: False positive: Generic.ml

cguide — Sat, 24 Oct 2020 12:48:07 GMT

Only the first file has been fixed.

Re: False positive: Generic.ml

cguide — Sat, 24 Oct 2020 12:50:51 GMT

Another file with same false positive detection.

SHA256: f3feafa635520b49ca9e346e85542f7b7633f1ecd4cb006d8ed9e1d14b9382cc

Virustotal: https://www.virustotal.com/gui/file/f3feafa635520b49ca9e346e85542f7b7633f1ecd4cb006d8ed9e1d14b9382cc/detection

File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Standard.exe

Re: False positive: Generic.ml

cguide — Wed, 28 Oct 2020 19:54:54 GMT

The above detections have been fixed. However, the same false detection happens again for newer versions of the above software. So it appears you are using a whitelisting strategy instead of improving the detection engine. Is there any hope this will be fixed properly in the future?