False Positive

[DmitryGR]

Hello,

Please fix false positive detection: 

https://www.virustotal.com/gui/file/5259f523e41ffa42af0753df4c020f911a585b311c3267f17703c14920a352b8...

Thank you!

[aleksandar.astardzhiev]

Hi @DmitryGR ,

This is community forum, although there are a lot of Palo Alto employees here. I would expect to much visibility for your request.

If you have active Palo Alto customer support account you can follow the process of submitting a false positive

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSBCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm3aCAC

[ymiyashita]

Here's another knowledge base article. The false positive is due to the incorrect WildFire verdict.

- WildFire report incorrect verdict (virus false positive or false negative)
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7KCAS

I submitted the verdict change request on behalf.

[iTopVPN]

Hello Palo Alto ,

Please fix false positive detection: 

spdt.exe (MaxSecure, NANO-Antivirus)
Virus Total Scanning Result: https://www.virustotal.com/gui/file/4c7f8799057351033bbe782cb065b5dfeec2762afccfbb7645380913eaa3a934
File Download link: https://www.sendspace.com/file/ow4rdb

Thanks!

[ymiyashita]

Hi ITopVPN,

As you can see on VirusTotal, Palo Alto Networks shows it as "Undetected" e.g. WildFire verdict is benign.
MaxSecure, NANO-Antivirus are other security companies. 😉

[iTopVPN]

Hello Ymiyashita,

Thanks for your reply. 

Sorry, I have submitted the wrong information. Please check this one:

InfoHelp.dll (Palo Alto Networks)
Virus Total Scanning Result: https://www.virustotal.com/gui/file/658f466839bc9c6b5ed38ec2710108d7bc2335e252a47d578e14390b2315d3a2
File Download link: https://www.sendspace.com/file/jg5wup

Thanks for your help.

[ymiyashita]

Hi ITopVPN,

Sorry for my late response. Somehow I got the email notification today.

The verdict of the sample was already fixed on July 2 PDT. It's benign now.
https://threatvault.paloaltonetworks.com/?query=658f466839bc9c6b5ed38ec2710108d7bc2335e252a47d578e14...

[iTopVPN]

Hello Palo Alto ,

Please fix false positive detection: 

Virus Total Scanning Result: https://www.virustotal.com/gui/file/8783ba0cceaa8b80547f906fc6b3f6a3af07cf4a87832b26c5c75bc5b13b5ebe
File Download link: https://www.dropbox.com/s/ewj516lansfkrgk/Paloalto.zip?dl=1

Thanks!

[ymiyashita]

The verdict change request can be submitted on the WildFire portal.

Reference:
- WildFire report incorrect verdict (virus false positive or false negative)
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7KCAS

I submitted it on behalf.

[ymiyashita]

The WildFire verdict was changed to Benign.
https://www.virustotal.com/gui/file/8783ba0cceaa8b80547f906fc6b3f6a3af07cf4a87832b26c5c75bc5b13b5ebe