https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212305#M477 <P>If you have a block it means that you are a Palo Alto Networks customer.</P><P>This forum is for non-Palo Alto Networks customers.</P><P>&nbsp;</P><P>Please have a case opened with Support to resolve this issue.</P> Mon, 30 Apr 2018 17:16:56 GMT mivaldi 2018-04-30T17:16:56Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212301#M474 <P>Hi,</P><P>&nbsp;</P><P>Please remove&nbsp;Setup_SmartRF_Studio_7-2.9.0.exe from the anti-virus Generic.qlvkh signature</P><P>SHA 256&nbsp;</P><TABLE><TBODY><TR><TD>65794026cd9fc7f55dd06fbf0564ce44bc2271b259d49a85df23d64b95b746a3</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>VirusTotal URL:</P><P><A href="https://www.virustotal.com/#/file/65794026cd9fc7f55dd06fbf0564ce44bc2271b259d49a85df23d64b95b746a3/detection" target="_blank">https://www.virustotal.com/#/file/65794026cd9fc7f55dd06fbf0564ce44bc2271b259d49a85df23d64b95b746a3/detection</A></P><P>&nbsp;</P> Mon, 30 Apr 2018 16:48:52 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212301#M474 AndrewDuncklee 2018-04-30T16:48:52Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212303#M475 <P>Can you please provide additional context?</P><P>What is this sample?</P> Mon, 30 Apr 2018 16:51:00 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212303#M475 mivaldi 2018-04-30T16:51:00Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212304#M476 <P>It is a setup .exe from Texas Instruments for a RF studio mangaement dashboard. It came in over http.</P><P>&nbsp;</P><P>Here is the detals pane from the block:</P><P>&nbsp;</P><DIV class="x-grid3-row x-grid3-row-first "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Threat Type</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">virus</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Threat Name</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">Virus/Win32.WGeneric.qlvkh</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">ID</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">2367300 (<A href="https://threatvault.paloaltonetworks.com/?query=2367300" target="_blank">View in Threat Vault</A>)</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Category</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">pe</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Content Version</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">Antivirus-0-0</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Severity</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">medium</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Repeat Count</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">1</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">File Name</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">Setup_SmartRF_Studio_7-2.9.0.exe</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">URL</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">&nbsp;</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Pcap ID</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">0</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row "><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Source UUID</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">&nbsp;</DIV></TD></TR></TBODY></TABLE></DIV><DIV class="x-grid3-row x-grid3-row-last x-grid3-row-over"><TABLE border="0" cellspacing="0" cellpadding="0"><TBODY><TR><TD><DIV class="x-grid3-cell-inner x-grid3-col-id2">Destination UUID</DIV></TD><TD><DIV class="x-grid3-cell-inner x-grid3-col-3">&nbsp;</DIV></TD></TR></TBODY></TABLE></DIV> Mon, 30 Apr 2018 16:53:42 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212304#M476 AndrewDuncklee 2018-04-30T16:53:42Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212305#M477 <P>If you have a block it means that you are a Palo Alto Networks customer.</P><P>This forum is for non-Palo Alto Networks customers.</P><P>&nbsp;</P><P>Please have a case opened with Support to resolve this issue.</P> Mon, 30 Apr 2018 17:16:56 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212305#M477 mivaldi 2018-04-30T17:16:56Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212312#M478 <P>Wil do, thank you!</P> Mon, 30 Apr 2018 17:41:43 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-removal-submission-generic-qlvkh/m-p/212312#M478 AndrewDuncklee 2018-04-30T17:41:43Z