Reply to thread

Message

<blockquote data-quote="BVLon" data-source="post: 866987">You can say “Small number of vendors have detected a threat and more might follow. We recommend that you keep the file blocked and we’ll rescan it again in 12 hours.”“VoodooAi has detected few signs that the file might be untrusted. We recommend that you keep the file blocked, unless you are absolutely sure it’s safe. “That will be &lt;30%.“Fair amount of vendors have detected threat in this file,&nbsp; so we’ve blocked it for your protection. We’ll check if this number will go up in 12 hours.”“VoodooAi has detected a fair amount of characteristics that this file is untrustworthy. We recommend that you stay away from this file and we’ll rescan it in 12 hours.”In 12 hours:“We rescanned a file that was deemed malicious by fair number of vendors and this number has now gone up from “x” to “y”. We recommend that you quarantine this file.”“The same number of engines as 12 hours ago detect a threat in this file. This is typical for potentially unwanted and low-risk software.We recommend that you do not use this file, unless you really know the source.”“We rescanned a file and the number of engines detecting it as a threat went down from “x” to “y”. It looks like it’s a false positive, but it will be best if we rescan the file once again.”“We rescanned a file that was suspected by VoodooAi and this file now appears in “y” blacklists. We recommend that you (block and rescan if [y/71]*100 &lt;30, or quarantine if [y/71]*100&nbsp; &gt;30)”And if users think differently than all 71 vendors and VoodooAi, they can exclude it and report fp. It’s actually extremely simple. De duplication here will be extremely important, as one Bitdefender detection will boost the percentage quite a lot. I already spoke about deduplication in my previous posts.</blockquote>

[QUOTE="BVLon, post: 866987"] You can say “Small number of vendors have detected a threat and more might follow. We recommend that you keep the file blocked and we’ll rescan it again in 12 hours.” “VoodooAi has detected few signs that the file might be untrusted. We recommend that you keep the file blocked, unless you are absolutely sure it’s safe. “ That will be <30%. “Fair amount of vendors have detected threat in this file, so we’ve blocked it for your protection. We’ll check if this number will go up in 12 hours.” “VoodooAi has detected a fair amount of characteristics that this file is untrustworthy. We recommend that you stay away from this file and we’ll rescan it in 12 hours.” In 12 hours: “We rescanned a file that was deemed malicious by fair number of vendors and this number has now gone up from “x” to “y”. We recommend that you quarantine this file.” “The same number of engines as 12 hours ago detect a threat in this file. This is typical for potentially unwanted and low-risk software. We recommend that you do not use this file, unless you really know the source.” “We rescanned a file and the number of engines detecting it as a threat went down from “x” to “y”. It looks like it’s a false positive, but it will be best if we rescan the file once again.” “We rescanned a file that was suspected by VoodooAi and this file now appears in “y” blacklists. We recommend that you (block and rescan if [y/71]*100 <30, or quarantine if [y/71]*100 >30)” And if users think differently than all 71 vendors and VoodooAi, they can exclude it and report fp. It’s actually extremely simple. De duplication here will be extremely important, as one Bitdefender detection will boost the percentage quite a lot. I already spoke about deduplication in my previous posts. [/QUOTE]

Verification