topic Re: False Positive Removal Request in VirusTotal

False Positive Removal Request

JJShield — Wed, 27 Dec 2017 08:58:25 GMT

Hello,

Software>PC Cleaning Utility has been flagged as generic.ml

Developer ShieldApps Software Innovations

Software is signed SHA256 21f830b2ded513be0f5b3ff1fcc831be49181f537ac879cf0800c24826efd38b

Has offical website download link: https://shieldapps.com/products/pc-cleaning-utility/

EULA: https://shieldapps.com/eula/

Thank you for your time.

Re: False Positive Removal Request

bvandivier — Wed, 27 Dec 2017 16:08:59 GMT

File sample with hashSHA256 21f830b2ded513be0f5b3ff1fcc831be49181f537ac879cf0800c24826efd38b has been submitted for re-analysis and re-categorization as appropriate. Please allow at least 24 hours for our analysts to review this file and confirm if a verdict change is appropriate.

Re: False Positive Removal Request

mivaldi — Tue, 02 Jan 2018 19:06:18 GMT

The sample 21f830b2ded513be0f5b3ff1fcc831be49181f537ac879cf0800c24826efd38b has been determined to be grayware and the associated virus signatures have been disabled. This issue is now resolved.

Re: False Positive Removal Request

JJShield — Tue, 09 Jan 2018 08:15:36 GMT

Hello,
I write on behalf of Shield Software Innovations the developer of the software addressed in False Positive submission. Regarding the software mentioned I have consulted our team. I forwarded your message and it seems in the past weeks the company has made significant adjustments to the software. In the aftermath, the software is no longer on the CSA deceptor list and all our software is updated to CSA guideline.

The following software also has been flagged as generic.ml

Hard Disk Shield SHA256 232c20bb6d901e9a6b2def2de25c7eb794e10312b5c9cd4516ea3831d45aa27e

Web Page: https://shieldapps.com/products/hard-disk-shield/

Thank you for your time

Re: False Positive Removal Request

bvandivier — Tue, 09 Jan 2018 19:21:24 GMT

Hello, we have submitted a verdict change request to benign on your behalf. Please allow us 24 to 48 hours to process this request.

Re: False Positive Removal Request

JJShield — Thu, 11 Jan 2018 08:37:18 GMT

Hello,

Another file Password Shield appears to be flagged as generic.ml

The software is signed as well SHA256: c5a0b2e87f47f7d6adad5ef3af4541595d978f8e671f6161ef7a96046513c356

Website with download link: https://shieldapps.com/products/password-shield/

The result is from Virus Total

Please advise

Thank you very much for your time

Re: False Positive Removal Request

bvandivier — Thu, 11 Jan 2018 15:03:30 GMT

c5a0b2e87f47f7d6adad5ef3af4541595d978f8e671f6161ef7a96046513c356 has been submitted for verdict change request to benign. Please allow 24 to 48 hours for us to process this change.

Re: False Positive Removal Request

bvandivier — Tue, 16 Jan 2018 16:11:16 GMT

Hello, the sample with hash c5a0b2e87f47f7d6adad5ef3af4541595d978f8e671f6161ef7a96046513c356 has been updated with a verdict of benign.

Resolved Time

2018-01-15T17:57:42.215902

Re: False Positive Removal Request

JJShield — Mon, 29 Jan 2018 07:53:37 GMT

Hello,

PC Privacy Shield has been flagged as generic.ml again on VirusTotal,

SHA256: 3cec25c32986f95ca3bae454046de0d5bccade9b3aa0fcac1bdd7b03de1362e2

Website with download link: https://shieldapps.com/products/pc-privacy-shield/

Please advise,

Thank you for your time.

Re: False Positive Removal Request

bvandivier — Mon, 29 Jan 2018 16:01:08 GMT

3cec25c32986f95ca3bae454046de0d5bccade9b3aa0fcac1bdd7b03de1362e2 has been submitted for manual analysis and a potential verdict change request to benign. Please allow us 24 to 48 hours to process this sample.

Thank you.

Re: False Positive Removal Request

bvandivier — Mon, 29 Jan 2018 18:18:10 GMT

After further analysis of 3cec25c32986f95ca3bae454046de0d5bccade9b3aa0fcac1bdd7b03de1362e2 we have changed this to a category of grayware. Please allow some time for this change to be reflected on Virustotal.

Re: False Positive Removal Request

JJShield — Wed, 07 Feb 2018 08:10:57 GMT

Hello,

The software PC Cleaning Utility has been flagged as generic.ml

Software is signed SHA256: a58820e5f7a2885f8b251d956b7f2e37802c611d3bb6d871212e69d2b9f8cd97

Website with download link: https://shieldapps.com/products/pc-cleaning-utility/

Privacy Policy: https://shieldapps.com/privacy-policy/

EULA: https://shieldapps.com/eula/

Thank you for your time again

Re: False Positive Removal Request

bvandivier — Wed, 07 Feb 2018 16:29:21 GMT

This latest sample has been submitted for analysis and possible verdict change. Given that this PC cleaning software is classified as a PUP it is likely the verdict will be changed to grayware. Also, given that this particular forum thread has already been marked as "solved", please start a new thread when reporting future false positives or verdict change requests.

Thank you.