Reporting False Positive from VirusTotal

thomas.jongepier — Mon, 30 Sep 2024 15:35:28 GMT

Dear Sir/Madam,

We would like to report a false positive in your virus scanner software, which is reported on this page on VirusTotal. The false positive in question is a small executable called CheckDotNetVersion.exe that we use during installation of our products. This executable attempts to find an existing .NET installation on the system, and if successful, runs the command 'dotnet --list-runtimes', and parses that command's output. The executable also dynamically loads kernel32.dll, as part of checking the system's architecture at runtime. The output of this executable is then used by our installer to decide if we need to install the .NET runtime or not. Upon request, the source code of this executable is available in case you want to inspect it.

We are 3mensio, a medical software company specialized in planning of cardiovascular procedures. Currently, our installation is reported by some of our customers as malicious software. We appreciate a swift processing of our request as it prevents some of our customers from performing medical care.

Best regards,

Thomas Jongepier

Manager Research & Development

3mensio Medical Imaging B.V.

Re: Reporting False Positive from VirusTotal

DaBone — Mon, 30 Sep 2024 21:20:32 GMT

File has been submitted for review

Re: Reporting False Positive from VirusTotal

DaBone — Tue, 01 Oct 2024 19:34:28 GMT

file no longer deemed malware

Re: Reporting False Positive from VirusTotal

thomas.jongepier — Thu, 03 Oct 2024 09:29:09 GMT

Palo Alto no longer indicates our software as malware in VirusTotal. We have not yet received verification from our customer if they're unblocked, but we expect this to be the case very soon.

Thank you

topic Re: Reporting False Positive from VirusTotal in VirusTotal

Reporting False Positive from VirusTotal

Re: Reporting False Positive from VirusTotal

Re: Reporting False Positive from VirusTotal

Re: Reporting False Positive from VirusTotal