topic Re: False positive submission (generic.ml) in VirusTotal

False positive submission (generic.ml)

kns123 — Tue, 09 Apr 2019 22:29:00 GMT

Hi, I would like to report a false positive detection by Palo Alto Networks of the following file:

File Hash:
MD5: D7DD4E3C8E1149CA513AE2C0B958592E
SHA1: D02A2402B7FD2FE1994B005035FBD0452264B84A
SHA256: CCF9F4E0D2C9BB650EAE304B951B5BCCCEBE63896CECC4F8E5217ED9DA82B928

Link to Virustotal report for the file:
https://www.virustotal.com/#/file/ccf9f4e0d2c9bb650eae304b951b5bcccebe63896cecc4f8e5217ed9da82b928/detection

Current VirusTotal Verdict:
generic.ml

Description:
App Name: System Keeper
App Version: 12.3.0.77
Company Name: Monterix Software LLC
System Keeper is a 10-in-1 ultimate tool which automatically fixes common system issues, optimizes system settings and cleans your PC
This app requires the user to register/purchase before performing any scan.

Thank you!

Re: False positive submission (generic.ml)

tsullivan7 — Thu, 11 Apr 2019 11:30:22 GMT

Thank you for contact Palo Alto Networks for this potential False Positive. Please allow us some time to investigate the sample to determine if it is malicious or not.

Re: False positive submission (generic.ml)

tsullivan7 — Thu, 11 Apr 2019 16:58:12 GMT

We've changed the category from malware to grayware. Grayware typically falls under the category of PUPs, Potentially Unwanted Programs. They aren't inherantly malicous but may often be unwanted. Things like browser plug-ins often fall into this category.

As it isn't classified as malicious you shouldn't have any issues going forward.