dgatchell Posted July 7, 2011 Report Share Posted July 7, 2011 I am running Immunet ver: 3.0.1.6112 It quarantened a file I pulled down from the IRS website: eftps.gov. They claim there is no virus in this file so I expect it is a false positive. I've attached a copy of the file for independent analysis. I hope this is the appropriate way to accomplish this, kif not please point me in the right direction. TrueUpdateClient.exe 7/2/2011 7:54:37 PM Detection Name W32.Crypt File Path C:\Program Files\EFTPS Batch Provider Client\bin\TrueUpdateClient.exe [/indent] TrueUpdateClient.zip Link to comment Share on other sites More sharing options...
sweidre Posted July 7, 2011 Report Share Posted July 7, 2011 I am running Immunet ver: 3.0.1.6112 It quarantened a file I pulled down from the IRS website: eftps.gov. They claim there is no virus in this file so I expect it is a false positive. I've attached a copy of the file for independent analysis. I hope this is the appropriate way to accomplish this, kif not please point me in the right direction. TrueUpdateClient.exe 7/2/2011 7:54:37 PM Detection Name W32.Crypt File Path C:\Program Files\EFTPS Batch Provider Client\bin\TrueUpdateClient.exe [/indent] Hi DougG, The main way (pinned by the administrator Anthony) to report a false postive is to send an email to support@samples.immunet.com with the file attached in a compresed format (.zip or .7z) for analysis. But I have seen administrators accepting your way to upload the compressed file to a post in this forum! No rule without exception, it is said! Cheers, sweidre PS. The file restoration path above, should be manually added to the exclusion list of Immunet. If upgraded to v. 3.0.2.6548 Immunet will automatically add the restoration path to the exclusion list! DS Link to comment Share on other sites More sharing options...
millard@immunet.com Posted July 8, 2011 Report Share Posted July 8, 2011 This is clean and now marked that way. --Millard Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.