https://live.paloaltonetworks.com/t5/general-topics/virus-win32-wgeneric-akbori/m-p/341566#M85672 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/100578">@Rajendranahak</a>&nbsp;</P><P><SPAN>Threat ID: 2851273 for&nbsp;Virus/Win32.WGeneric.akbori.</SPAN></P><P><SPAN>This alert is generated because of&nbsp;</SPAN><SPAN>Antivirus Signatures and&nbsp;</SPAN><SPAN>WildFire Signatures.</SPAN></P><P><SPAN>We have installed&nbsp; Antivirus Signatures &nbsp;Release: 3423 updates.</SPAN></P><P><SPAN>here is link how to add exception</SPAN></P><P><SPAN><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcrCAC" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcrCAC</A></SPAN></P> Fri, 31 Jul 2020 09:31:28 GMT bit_byte 2020-07-31T09:31:28Z https://live.paloaltonetworks.com/t5/general-topics/virus-win32-wgeneric-akbori/m-p/341557#M85669 <P><SPAN>1) Why is this virus triggering in Palo Alto events and</SPAN><SPAN>&nbsp;Palo detecting this &amp; alerting ?<BR /></SPAN></P><P><SPAN>2) How hashes are different, is there false positive.</SPAN></P><P>&nbsp;</P><TABLE width="833"><TBODY><TR><TD width="185">Details</TD><TD width="72">Source</TD><TD width="186">MD5</TD><TD width="151">SHA-1</TD><TD width="239">SHA-256</TD></TR><TR><TD width="185">Virus/Win32.WGeneric.akbori(345886398)</TD><TD width="72">Paloalto</TD><TD width="186">ce27d52c7d1f59ad2c867e97339fa212</TD><TD width="151">2dda6a0bb6c587c0b8731c094d76187b80c866d1</TD><TD width="239">37aa186c2e7ca3e3f22264da9744995252e131469a8261761ce2ae3364d0997e</TD></TR><TR><TD width="185">Virus/Win32.WGeneric.akbori(345886398)</TD><TD width="72">Paloalto</TD><TD width="186">0b69e97f461827d7f66ce8eabd67b10c</TD><TD width="151">ad5be496881825c6d599139b64bc8c4df63909ee</TD><TD width="239">fe7cb37b5121f2f66364df4a4209a8a26a1337834b801b260e79473f23705979</TD></TR><TR><TD width="185">Firefox_Setup_77.0_x86_tw39634-49573en.exe</TD><TD width="72">Virus Total</TD><TD width="186">&nbsp;df809a7e3e54e574010c82ac8d71910e</TD><TD width="151">&nbsp;2a9e2b1eb0249d0b0dd8e397c160db3d633e2dbb</TD><TD width="239">48512979e3b9ac475fdd5168cc8d4006d2f36064cb0bf4db8c3100a9b1e532b9</TD></TR><TR><TD width="185">Firefox_Setup_77.0_x64_tw39634-49574en.exe</TD><TD width="72">Virus Total</TD><TD width="186">27ddba3ec5ac277f3b4ccebb09dd4989</TD><TD width="151">62cd3506ea794b01b4f32a79e6cf257cb57d5876</TD><TD width="239">&nbsp;859efffc777b2260250c982036920baef79369cbce08822ba8700db1ec7e8b88</TD></TR></TBODY></TABLE> Fri, 31 Jul 2020 07:47:41 GMT https://live.paloaltonetworks.com/t5/general-topics/virus-win32-wgeneric-akbori/m-p/341557#M85669 Rajendranahak 2020-07-31T07:47:41Z https://live.paloaltonetworks.com/t5/general-topics/virus-win32-wgeneric-akbori/m-p/341566#M85672 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/100578">@Rajendranahak</a>&nbsp;</P><P><SPAN>Threat ID: 2851273 for&nbsp;Virus/Win32.WGeneric.akbori.</SPAN></P><P><SPAN>This alert is generated because of&nbsp;</SPAN><SPAN>Antivirus Signatures and&nbsp;</SPAN><SPAN>WildFire Signatures.</SPAN></P><P><SPAN>We have installed&nbsp; Antivirus Signatures &nbsp;Release: 3423 updates.</SPAN></P><P><SPAN>here is link how to add exception</SPAN></P><P><SPAN><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcrCAC" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcrCAC</A></SPAN></P> Fri, 31 Jul 2020 09:31:28 GMT https://live.paloaltonetworks.com/t5/general-topics/virus-win32-wgeneric-akbori/m-p/341566#M85672 bit_byte 2020-07-31T09:31:28Z