Irs Download For Eftps

[dgatchell]

I am running Immunet ver: 3.0.1.6112

 

It quarantened a file I pulled down from the IRS website: eftps.gov. They claim there is no virus in this file so I expect it is a false positive. I've attached a copy of the file for independent analysis. I hope this is the appropriate way to accomplish this, kif not please point me in the right direction.

 

TrueUpdateClient.exe 7/2/2011 7:54:37 PM

Detection Name

W32.Crypt

File Path

C:\Program Files\EFTPS Batch Provider Client\bin\TrueUpdateClient.exe [/indent]

TrueUpdateClient.zip

[sweidre]

I am running Immunet ver: 3.0.1.6112

It quarantened a file I pulled down from the IRS website: eftps.gov. They claim there is no virus in this file so I expect it is a false positive. I've attached a copy of the file for independent analysis. I hope this is the appropriate way to accomplish this, kif not please point me in the right direction.

TrueUpdateClient.exe 7/2/2011 7:54:37 PM

Detection Name

W32.Crypt

File Path

C:\Program Files\EFTPS Batch Provider Client\bin\TrueUpdateClient.exe [/indent]

Hi DougG,

The main way (pinned by the administrator Anthony) to report a false postive is to send an email to support@samples.immunet.com with the file attached in a compresed format (.zip or .7z) for analysis.

But I have seen administrators accepting your way to upload the compressed file to a post in this forum! No rule without exception, it is said!

Cheers,

sweidre

PS. The file restoration path above, should be manually added to the exclusion list of Immunet. If upgraded to v. 3.0.2.6548 Immunet will automatically add the restoration path to the exclusion list! DS

[millard@immunet.com]

This is clean and now marked that way.

--Millard