Reporting False Positive from VirusTotal

[thomas.jongepier]

Dear Sir/Madam,

We would like to report a false positive in your virus scanner software, which is reported on this page on VirusTotal. The false positive in question is a small executable called CheckDotNetVersion.exe that we use during installation of our products. This executable attempts to find an existing .NET installation on the system, and if successful, runs the command 'dotnet --list-runtimes', and parses that command's output. The executable also dynamically loads kernel32.dll, as part of checking the system's architecture at runtime. The output of this executable is then used by our installer to decide if we need to install the .NET runtime or not. Upon request, the source code of this executable is available in case you want to inspect it.

We are 3mensio, a medical software company specialized in planning of cardiovascular procedures. Currently, our installation is reported by some of our customers as malicious software. We appreciate a swift processing of our request as it prevents some of our customers from performing medical care.

Best regards,

Thomas Jongepier

Manager Research & Development

3mensio Medical Imaging B.V.

[DaBone]

File has been submitted for review

[DaBone · Accepted solution]

file no longer deemed malware

[thomas.jongepier]

Palo Alto no longer indicates our software as malware in VirusTotal. We have not yet received verification from our customer if they're unblocked, but we expect this to be the case very soon.

Thank you