topic Re: False Positive Removal Request in VirusTotal

False Positive Removal Request

bobdaley — Mon, 25 Mar 2019 11:00:14 GMT

Hello,

our customers are reporting again a false-positive with Palo Alto. We have checked our software on VirusTotal and see a false-positive detection (generic.ml).

Please check the password protected zip file with one Win32 executable (our web update):
https://www.setupbuilder.com/falsepositives/wud_sb100_6191_dev.zip

Password for the ZIP file is “false” (without quotes).

This is the VirusTotal report:
https://www.virustotal.com/gui/file/888e427f08f698b19c23a51f0f19f6527c735d5df8c584c749cc99ed079b8d89/detection

Thank you for your help.

Best Regards

Robert Daley
SetupBuilder Support

Re: False Positive Removal Request

nigelswift — Mon, 25 Mar 2019 17:43:33 GMT

Thanks for reaching out. Based on my own analysis, the file doesn't appear to be malicious in nature. I have submitted for this to be updated, our researchers will be able to assess this as well and will update the the verdict according to their findings.

I should know more within the next 24-48 hours and will update this forum accordingly.

Re: False Positive Removal Request

nigelswift — Mon, 25 Mar 2019 20:50:08 GMT

Hey Bob,

Just got word from our researchers that this has been successfully changed to a benign verdict which I confirmed is now reflected in the VT details for the hash that you previously provided.

Apologies for the inconvenience and thanks for bringing this to our attention. Should be all good to go now.