VirusTotal
Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
VirusTotal
Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
About VirusTotal

Welcome to the VirusTotal discussion forum. This forum exists as a place to submit verdict review requests for False Positive verdicts for Palo Alto Networks (Known Signatures) seen on VirusTotal. All posts to this forum must be properly structured in order to be reviewed by our team.

For an introduction to the forum, please see the sticky!

Disclaimer:
This forum is not a customer support venue. Palo Alto Networks staff will not engage in active discussions on this forum. Our staff will ingest properly formatted submissions for review and update Palo Alto Networks (Known Signatures) verdicts when appropriate. For information on contacting Palo Alto Networks support, click here.

Discussions

VirusTotal Verdict Change Request for False Positive

Sticky post for VirusTotal Discussion Forum.

 

This forum is here to enable those who are not Palo Alto Networks customers to submit a false positive verdict change request for a Palo Alto Networks verdict on VirusTotal. (i.e. malware or malicious

...

brcook by L2 Linker
  • 9222 Views
  • 0 replies
  • 5 Likes

Resolved! DNS Signature generic:www.indocommco.com

Hi team,

 

This is false positive, please check:

File Hash: - URL only

Link to Virustotal report for the file: https://www.virustotal.com/#/url/1dfc3433bd62b0f90d67c55eddae355dcb2886a8f77d3542243e2dc326cbd584/detection

Current VirustTotal Verdict: No engi

...

False positiv submission

File Hash: d2385e818e9e5e99dab838268835efa56762d6861eeaf574d15916c96494e3d8

Link to Virustotal report for the file: https://www.virustotal.com/pt/file/d2385e818e9e5e99dab838268835efa56762d6861eeaf574d15916c96494e3d8/analysis/

Current VirustTotal Verdic

...

Xvirus by L0 Member
  • 2195 Views
  • 1 replies
  • 0 Likes

False Positive Removal Request

My website www.ShipFIMS.com has been improperly designated as Malicious in your systems.

 

This is a hosted label generator for FedEx and has no malicious content or interest in phishing. The site does not ask for secure information and is login and pa

...

jjcdlww by L0 Member
  • 2310 Views
  • 1 replies
  • 0 Likes

False Positive Submission

Good evening,

We draw your attention to the false positive your algorithms to identify malware.
Virustotal: https://www.virustotal.com/en/file/474fae997f194d3de0a2e252b66e4062f1974043d63ba0cd27c9109eee28d8ea/analysis/1500999976/
File: https://se7en.ws/f

...

ansikun by L0 Member
  • 2693 Views
  • 1 replies
  • 0 Likes

False Positive, gRO

The sample is in the password protected zip file:

http://37.61.202.134/false/GatheringRO-Patcher.zip

http://37.61.202.134/false/gRO_Patcher_Update_05-08-17.zip

 

The password for the zip file is:

infected

 

GatheringRO-Patcher

https://virustotal.com/de/file/

...

Everade by L0 Member
  • 2182 Views
  • 1 replies
  • 0 Likes

False Positive for ThreatSupport_Anti-Malware.exe

Dear Sir or Madam, This Andrey Filatov from Threat Support. You have mistakenly detected the file ThreatSupport_Anti-Malware.exe in Threat Support Anti Malware as malware "(generic.ml)". It is a false positive. It will bring troubles to both our user...

False Positive for ThreatSupport_Anti-Malware.exe

Dear Sir or Madam, This Andrey Filatov from Threat Support. You have mistakenly detected the file ThreatSupport_Anti-Malware.exe in Threat Support Anti Malware as malware "(generic.ml)". It is a false positive. It will bring troubles to both our user...

False positive generic.ml

Some of the programs in this page 

http://www.saleensoftware.com/

 

are wrongly marked with -> Palo Alto Networks (Known Signatures) generic.ml

e.g.

 

File Hash: d19489e56fc32be3bb71005552f4ce5c002dfce6be0f39faee8fa926e6b59fa8
Virustotal: https://www.virust

...

False-positive on comodo

Hi,

 

I would like to draw urgent attention of Paloalto Networks staff to resolve following false-positive on one of Comodo Internet Security files:

 

File SHA-1: aa98566f8b3f254dc8fb3678b0e3b983270310fe

Link to Virustotal report for the file: https://www

...

False positive on musikcube

Clearing some false positives for musikcube (https://github.com/clangen/musikcube) a CLI music player:

  

File Hash: b1f3b24610649092c6880db37df72ffa03a6350c8c030726448be36de285526c

Link to Virustotal report for the file:https://www.virustotal.com/en/fi

...

vaosde by L0 Member
  • 2102 Views
  • 1 replies
  • 0 Likes

Please review for possible false positive

File Hash: eab82990070b3909b8119f8798dff388ef99cc6561be52a5eb60e2bba7510ba5

Link to Virustotal report for the file: https://www.virustotal.com/#/file/eab82990070b3909b8119f8798dff388ef99cc6561be52a5eb60e2bba7510ba5/detection

Current VirustTotal Verdict

...

CorusEnt by L0 Member
  • 2053 Views
  • 1 replies
  • 0 Likes

False Positives for AppEdReview.com

To Whom It May Concern,

 

My name is Corey Lee. I am the webmaster of AppEdReview.com. Recently, one of your network users reported to us that your network blocks our website (https://appedreview.com/). I understood that our website was hacked and some

...

False Positive detections "generic.ml"

VirusTotal and see false positive detections generic.ml.

SHA-1: cac2098916b738480b65570df031d2b464154391

SHA-256: f3ee005f24c8ebf905f6611e0215fa35a52356e20351dbec7095a621bfcbcc0e

Current VT Verdict: generic.ml

The latest report from VT: https://www.virus

...

corsacow by L0 Member
  • 1974 Views
  • 1 replies
  • 0 Likes

False Positive detections of our software ("generic.ml")

Hello, I work at ISI Sviluppo Informatico SRL ( www [dot] isisviluppo [dot] it), we are a software development company.

We have one executable ( LauncherPlus.exe ), part of our software, that is detected as a virus by your product, but it's a false po

...

mferrari by L0 Member
  • 2019 Views
  • 1 replies
  • 0 Likes

False Positive: Hamster Free Video Converter

I think this is a false positive. Only 1 other virus engine besides PA is saying it is bad.

 

File Hash: 0617c8c1be55ea923fbfef8d0a92957b8a753e47fb77d847d33778ae563e011c

Link to Virustotal report: https://www.virustotal.com/#/file/0617c8c1be55ea923fbfef

...

amorrow by L0 Member
  • 2630 Views
  • 1 replies
  • 0 Likes
  • 720 Posts
  • 56 Subscriptions
Top Solution Authors
Top Liked Authors