False positive on VirusTotal

Reply
L4 Transporter

Re: False positive on VirusTotal

The verdict for this file has been set, there will not be any changes. As far as Palo Alto is conserned this file is Greyware. 

L2 Linker

Re: False positive on VirusTotal

Can you please provide contact info for your legal department?

Palo Alto Networks Guru

Re: False positive on VirusTotal

Hi, 

 

I'm part of the product management team here at Palo Alto Networks focusing on WildFire. 

 

We'd like to help out. 

 

A couple questions:

1. Is your primary concern the representation of this file on VT? 

2. Pending on your response, what is your concern with the verdict of grayware? Customer's rarely block or restrict file access based on grayware and VT should no longer reflect a hit after the sample is reanalyzed.

 

L2 Linker

Re: False positive on VirusTotal

Hello and thank you for your help.

 

Our biggest concern is that our app does not fit into your Grayware criteria.

I have clearly explained what our app does and asked your team to specifically point out how our application is classified under your Grayware definition and your staff has yet to reply with specific examples.  Your definition is broad and does not explicitly or directly addresses our application.  Your definition of Grayware includes business and technology practices that are a) not applicable to us b) completely the opposite of what our app does c) missleading and counter intuitive.

 

Please advise as to next steps.  

Thank you

L2 Linker

Re: False positive on VirusTotal

Hello again

Looks like you guys are flagging us again.

Can you please remove the blocking and whitelist us.

Thank you

L2 Linker

Re: False positive on VirusTotal

Please advise if you received last post.

Highlighted
L2 Linker

Re: False positive on VirusTotal

Hello, 

We took your advice to escalate to our legal department, and recommend that your attorney contact our Corporate Legal Counsel, Ms. Wee, directly at lwee@paloaltonetworks.com if you wish to discuss the matter further.

Thank you.

L2 Linker

Re: False positive on VirusTotal

Thank you
We are simply asking you to remove the blocking as its inacurate.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!