05-31-2018 02:01 AM
Hi,
Not sure if this is under the correct category but here we go.
I have a false positive in my FWs, I have a file called Pv7_00_169SetupFull.exe which the FWs are detecting as Virus/Win32.WGeneric.qxdip
If I upload and scan the file with VirusTotal it gives all green lights: https://www.virustotal.com/#/file/e36d3bb4f9eaff256ecd50f4a6875e41d65d12ef87d06bf7bde79874e989e259/d...
Thanks in advance
05-31-2018 08:58 AM - edited 05-31-2018 08:58 AM
Sounds like a signature collision.
Sometimes benign files collide with signatures generated for False Positives, and the collision can be resolved by fixing the FP.
There are other instances where a file may be colliding with the signature of a true malware sample.
In that case the general recommendation will be to configure an Antivirus exception.
In very particular situations, (where a signature for a true malware file causes a massive amount of collisions) we can work with PE files to make the signature more specific.
In any case, your issue should be worked through a Support case.
Please open a case with Support.
05-31-2018 08:58 AM - edited 05-31-2018 08:58 AM
Sounds like a signature collision.
Sometimes benign files collide with signatures generated for False Positives, and the collision can be resolved by fixing the FP.
There are other instances where a file may be colliding with the signature of a true malware sample.
In that case the general recommendation will be to configure an Antivirus exception.
In very particular situations, (where a signature for a true malware file causes a massive amount of collisions) we can work with PE files to make the signature more specific.
In any case, your issue should be worked through a Support case.
Please open a case with Support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
