False Positives problem of anti-virus

[ttwict]

Hi,

During copy file (see attachment) from internal server I get Virus ALert: threatid: Worm/Win32.Otwycal.g(890863)

I checked the file on http://www.virustotal.com/ without matches for viruses

Is It a false/positive?

[swhyte]

Hello ttwict,

is the attached file what triggered the threat?

What is your customer information and/or serial#?

What is the content version and software version that you are running on your Paloalto device?

We will probably need to get a case opened for this.

[ttwict]

Hello,

yes, the attached file triggered the threat.

Device Information:

serial: 0006C100754
sw-version: 3.0.6
vpnclient-package-version: 0.0.0
app-version: 173-561
threat-version: 173-561
url-filtering-version: 3296
logdb-version: 2.0.5

Thanks and Regards,

André