VirusTotal
Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VirusTotal
Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
About VirusTotal

Welcome to the VirusTotal discussion forum. This forum exists as a place to submit verdict review requests for False Positive verdicts for Palo Alto Networks (Known Signatures) seen on VirusTotal. All posts to this forum must be properly structured in order to be reviewed by our team.

For an introduction to the forum, please see the sticky!

Disclaimer:
This forum is not a customer support venue. Palo Alto Networks staff will not engage in active discussions on this forum. Our staff will ingest properly formatted submissions for review and update Palo Alto Networks (Known Signatures) verdicts when appropriate. For information on contacting Palo Alto Networks support, click here.

Discussions

VirusTotal Verdict Change Request for False Positive

Sticky post for VirusTotal Discussion Forum. This forum is here to enable those who are not Palo Alto Networks customers to submit a false positive verdict change request for a Palo Alto Networks verdict on VirusTotal. (i.e. malware or malicious verdict for a file that is demonstrably benign). Please submit the following information in the...

brcook by L2 Linker
  • 13807 Views
  • 0 replies
  • 7 Likes

Resolved! False Positive Removal Request

Hi, Could you please white-list our software installer as it's marked as generic.pup on virustotal.com website which should be a false-positive. File Hash: 012de50556f62146c28d8bc1265efd8885e2312af8350ee94f0f48c2f9f8e1eaCurrent VT Verdict: generic.pupLink to Virustotal for the file: https://virustotal.com/en/file/012de50556f62146c28d8bc1265efd88...

Palo Alto appliance FP detections

I have come across numerous FPs. I am curious how the Palo Alto appliance alerts on files. The Threat Vault shows a file hash and a Virus total link generally. The files triggering signatures have nothing in common with the signatures often so I would appreciate any insight into the logic behind the appliance triggering, is it supposed to be mat...

Resolved! FP Removal request

Hi there, Can I ask you to reanalyse this file and remove from detection please? Thanks.

Resolved! False positive detection "generic.ml"

Hello.We have checked our software on VirusTotal and see false positive detections (generic.ml).File Hash: 3c708afa2e1e50cdfc41f4ad233206969f20fef3Current VT Verdict: generic.mlDescription: False positive detection in Safebytes_Anti-Malware.exe with Paloalto version 1.0 on VirusTotal.The latest report from VT: https://www.virustotal.com/file/0e2...

Resolved! false positvie for a ruler for windows

virus total is reporting a false positive ( Palo Alto Networks (Known Signatures) - generic.pup ) for my program, a ruler for windows. The program does not include malware, and none of the other 60 engines used by Virustotal are flagging it as malware. Here is the virus total reporthttps://virustotal.com/en/file/71ddbd5f78070799283f8392653385c...

Resolved! generic.ml believed false positive

The most recent installer 1,3 installer for php 5.5 of: https://www.iis.net/downloads/microsoft/wincache-extension is flagged as a virus. I belive this is wrong. Download available here: https://sourceforge.net/projects/wincache/files/wincache-1.3.7/wincachewpi-1.3.7.12-5.5-nts-vc11-x86.exe/download https://www.virustotal.com/en/file/6924c8db4fc...

jabbera by L0 Member
  • 5166 Views
  • 2 replies
  • 0 Likes

Resolved! False Positive Removal Request

Hi, Could you please white-list our software installers as there’re marked as generic.pup on virustotal.com website which should be a false-positive. File Hash: c324f1f4904389346b2666078c120c06a8d97b70be2d9b618a1c29ead6a4ef26Current VT Verdict: generic.pupLink to Virustotal for the file: https://virustotal.com/en/file/c324f1f4904389346b2666078c1...

Resolved! Other false positive removal request

Greetings,We have checked our software on VirusTotal and see other 8 false positive detections (generic.pup). The latest reports from VT are: https://www.virustotal.com/en/file/88ec8d191565b5e6c64965f61b8a03154423e3b7b378339f0b45cd245618593b/analysis/https://www.virustotal.com/en/file/ba7c3157b033be801ac7e0adaffb1f8c05be8de60610b4cc53dfb85a0dd1...

Resolved! Virus total false positive, dll-files.com Client

Hi, We recently noticed a flag on our software at virustotal.com from your company. I believe this is a false positive. Our product is developed with strict security in mind and we've been promoting our brand online since 1998, first software in 2010 and the current one since June of last year. The software automates resolution of DLL errors on...

Resolved! VirusTotal False positives

Greetings, We have recently noticed some of our software showing as "generic.pup" on Virustotal by your program Palo Alto Networks (known signatures) Paretologic PC Health Advisor foreign language installers: https://www.virustotal.com/en/file/e9a6a1afc2213f4dee37ec2e8b984a3db51d503c0c4208378b1f11428203f385/analysis/1491334268/ https://www.virus...

pbirch by L0 Member
  • 4409 Views
  • 2 replies
  • 0 Likes

Resolved! False Positive submission

Hello, Our software updater ARMupdt.exe has been flagged as 'generic.pup' by Palo Alto Networks version 20170403, as discovered on virustotal.com: https://www.virustotal.com/en/file/71334cacc6b943e20628acdf2fc521d142e73da27e8aa397f54dfda4d57d0d8c/analysis/1491209282/. This is a false-positive, and will affect any of our clients trying to install...

gdmdata by L0 Member
  • 4489 Views
  • 1 replies
  • 0 Likes

Virus Total PaloAltoNetworks FALSE POSITIVE

Based on VirusTotal results, PaloAltoNetworks reports http://www.dol.gr/helioskiosk.gr/PCReader/HeliosInstaller.exe as a virus. We are sure the file is secure, so we think it is a False Positive. We would appreciate any guidance on the matter. Regards.

kozois by L0 Member
  • 3294 Views
  • 1 replies
  • 0 Likes

Resolved! False Positive for IWsIMF_AV.exe

Dear Sir or Madam, This is Maggie from IObit. You have mistakenly detected the file IWsIMF_AV.exe in IObit Malware Fighter v5 as threats. It is a false positive. It will bring troubles to both our users and affect our reputation. Please check details here: https://www.virustotal.com/en/file/7c5a30b3c369507d03ed28d8400b5fcb4dd476f6205f6c294ec31...

Resolved! False Positive Removal Request

Greetings,We have checked our software on VirusTotal and see false positive detections (generic.pup).File Hash: b3dee21b8f7f4e7c6d37c70bb37222ffa4415c7e0fe61ace1a22cd2b60a3c8ccCurrent VT Verdict: generic.pupDescription: False positive detection in pctuneupmaestro_setup.exe with Palo Alto Networks definition version 20170328 on VirusTotal. The la...

Resolved! False positive for LiteManager

Hi!I'm not sure, but one of our user send me report about virustotsl detection for LiteManagerPaloalto detect LiteManager as Virus/Win32.malicious.iownLiteManager is not Virus , Trojan or malwarehttp://litemanager.com/soft/pro/ROMServer.zipQuickSupport moduleI am developer of LiteManager it is a legal remote control software, it is similar to Te...

lic_agreeement_new.png
  • 787 Posts
  • 67 Subscriptions
Top Solution Authors