Immone Free + Avast Free

[rosshi]

hi, I have noticed that Immunet reports that is has quarantined files it says are;

 

w32.backdoor, w32.Trojan, w32.dropper.

 

on closer investigation I discovered it referringring to avasts .tmp files that the avast program uses whilst performing a scan;

 

unp263597048.tmp - unp265388200.tmp - etc.

 

Is this, false positive reporting for Immunet 3.0 free??????

 

Please advise

regards

[sweidre]

hi, I have noticed that Immunet reports that is has quarantined files it says are;

w32.backdoor, w32.Trojan, w32.dropper.

on closer investigation I discovered it referringring to avasts .tmp files that the avast program uses whilst performing a scan;

unp263597048.tmp - unp265388200.tmp - etc.

Is this, false positive reporting for Immunet 3.0 free??????

Please advise

regards

Hi rosshi,

The main way to report malware file(s) is for both Immunet Free & Plus to send an email to support@samples.immunet.com with attachment(s) of the file(s) compressed into zip- or 7z- format. (Note, if sent by Gmail the zip-format is not possible, only 7z-format!). After Immunet analysis the reply will be sent within 2 hours (US Mountain Time Mon-Fri 9-5). Automatically the reply (infection or false postive) will also be sent to the Immunet Cloud, so that the whole Immunet Community will get the information.

Cheers,

sweidre

[rosshi]

Thank you sweidre, I will send the relevant files (zipped)

ATB

rosshi

[sweidre]

Thank you sweidre, I will send the relevant files (zipped)

ATB

rosshi

Hi rosshi,

It is really good, if you will send the files (zipped) attached to an email to support@samples.immunet. It has been said, that Immunet Analysis Laboratory will send a reply within 2 hours. I assume, that this is valid during the worktime of Immunet (US Mountain Time Mon-Fri 9-5). It should be nice to know, if at least one single employee is partly working during weekends or long holidays e.g. Xmas+New Year & Easter. So, please, tell me on this thread, when you have received the reply from the Immunet Laboratory. (Being in Sweden I am very far from the center of events: US/Canada). Sometimes a reply from the Immunet Laboratory is not urgent, at all, so the file(s) can remain in qurantine for long without any problems. But sometimes a reply, that the file(s) is/are not malicious (=false postive(s)) will give you the opportunity to restore the file(s) without any danger.

If you submit a file to Immunet and you need a real fast message, if the file is malicious or a false positive, you can in addition yourself upload the file for analysis to Virus Total. You need a small simple software (freeware), that you download from the homepage of Virus Total: http://www.virustota...m/advanced.html On this homepage, select the tab: "VT Uploader", that will give you a description of the software and a button to download it to your computer. A suspicious file you can thru this software upload to Virus Total, where 42 different Anti-Malwares will analyze the file. In a couple of minutes you'll get an report in your browser, what products have regarded the file as clean and what products have regarded the file as contaminated. Let's say, that only 5 of the 42 products have regarded the file as contaminated, you can assume, that the 5 softwares have reported false positives. If let say 75% of the products report the file to be contaminated, you should regard the file as malicious. But it is up to you to intepretate the report using probability. But, if you need to have the file examined by Virus Total, remember you must send the file in an attachment of an email to Immunet anyhow! Reason: Only via Immunet Analysis the file will (infected or not) be reported to the Immunet Cloud!!!

Cheers,

sweidre