topic Re: False Positive Submission (generic.ml) in VirusTotal

False Positive Submission (generic.ml)

Xiayutu — Tue, 08 May 2018 20:31:07 GMT

Hello,

can you please check this detection, it is generic.ml false positive on clean application: PC Cleaning Utility from ShieldApps.com

https://www.virustotal.com/#/file/2fbff1db0aa432f303cc1d842a78922fd66189da617dbfbd67750a9318a4a1a2/detection

SHA256: 2fbff1db0aa432f303cc1d842a78922fd66189da617dbfbd67750a9318a4a1a2

Thanks!

Researcher@AppEsteem.com

Re: False Positive Submission (generic.ml)

kevinclepalo — Fri, 18 May 2018 14:03:36 GMT

The file with SHA256:2fbff1db0aa432f303cc1d842a78922fd66189da617dbfbd67750a9318a4a1a2 has been submitted for verdict review.
Please allow at least 24 hours for our analysts to review this file and confirm if a verdict change is appropriate.

Re: False Positive Submission (generic.ml)

tsullivan7 — Tue, 15 May 2018 13:00:50 GMT

This sample has been submitted for evaluation. I'll let you know when the verdict is changed.

Re: False Positive Submission (generic.ml)

Xiayutu — Wed, 16 May 2018 19:14:12 GMT

Hello!

Is there any progress? The file is still flagged as generic.ml based on the latest VT scanning result. Please help to escalate this case to be addressed!

Thanks!

XYT

Re: False Positive Submission (generic.ml)

kevinclepalo — Wed, 16 May 2018 22:22:30 GMT

Hello,

The sample has been found to be grayware. The change will reflect immediately in WildFire and VirusTotal, and all associated antivirus signatures will be removed starting with tomorrows release of the Palo Alto Networks Antivirus database.