topic Re: False positive: Win32.WGeneric.xlukg in VirusTotal

False positive: Win32.WGeneric.xlukg

NickFreeman — Thu, 14 Feb 2019 12:23:19 GMT

I am trying to download a BLheli32 suite and both AV and wildfire are suggesting that install-filter.exe within the archive contains Win32.WGeneric.xlukg

Virustotal returns no threat, and other users are suggesting this is a false positive
payload is : BLHeliSuite32_32608.zip
at:
https://drive.google.com/drive/folders/1Y1bUMnRRolmMD_lezL0FYd3aMBrNzCig

Please can you validate ?

Re: False positive: Win32.WGeneric.xlukg

dparris — Thu, 14 Feb 2019 19:17:10 GMT

We are unable to download files. Can you please supply the sha256 hash of the file in question?

Re: False positive: Win32.WGeneric.xlukg

NickFreeman — Fri, 15 Feb 2019 00:54:05 GMT

The threat log is refers to

Re: False positive: Win32.WGeneric.xlukg

dparris — Thu, 14 Feb 2019 20:15:12 GMT

If you are a Palo Alto customer please open a ticket from your customer portal.

You can open a false positve ticket, and a threat specialist will handle your ticket as soon as possible.

We are unable to help customers from this venue, as much of the information you have available should not be shared in a public forum.