Assigned Zemana False Positive Report Thread

[flyable]

Dears,

There is a false positive for my software(https://play.google.com/store/apps/details?id=com.fiistudio.fiinote). Please re-check it and remove it from your virus list.

Thanks very much!
flyable

 

[KevinYu0504]

Dears,

There is a false positive for my software(https://play.google.com/store/apps/details?id=com.fiistudio.fiinote). Please re-check it and remove it from your virus list.

Thanks very much!
flyable

Suggest you direct send a email to Zemana official ,
because seems there is no any Zemana official's employee will come here any more ...

 

[Miss Onnellisuus]

Hello guys from now on I will be following this thread and make sure to inform my team so they can fix false positives as soon as they appear.

@Mops21 thank you for directing me to this thread. Appreciated

 

[JM Safe]

Hello guys from now on I will be following this thread and make sure to inform my team so they can fix false positives as soon as they appear.

@Mops21 thank you for directing me to this thread. Appreciated

Thank you for your great support!

 

[Mops21]

Hi @Miss Onnellisuus

Thank you very much for your Infos

I have 1 False Positive for you

Xvirus Firewall 5.0.0.0 Beta 1.exe
Status : Gescannt
Object : %userprofile%\downloads\xvirus firewall 5.0.0.0 beta 1.exe
MD5 : 80649FA8041CE0A7C0E680F2FC6694B9
Publisher : -
Size : 1643008
Version : 5.0.0.0
Detection : Trojan:Win32/Blackoat.A!Eakt
Cleaning Action : Quarantäne
Related Objects :
Datei - %userprofile%\downloads\xvirus firewall 5.0.0.0 beta 1.exe

xvirus-firewall-setup.exe

VirusTotal

With best Regards
Mops21

 

[ForgottenSeer 69673]

Will FP"s be dealt with quicker by posting here or by clicking the send feedback link at bottom of GUI and sending the file?

 

[JM Safe]

Will FP"s be dealt with quicker by posting here or by clicking the send feedback link at bottom of GUI and sending the file?

Hey @ticklemefeet I think it is quite similar, but with this thread you can provide more details to Zemana team.

 

[Mops21]

Hi @ZAM3_PO and Hi @Miss Onnellisuus

I have a new 1 False Positive see my screenshot

MD5 : 6623C4BCB0C51061EC7F480029FB95DF
Status : Scanned
Object : c:\program files\7-zip\7-zip.dll
Publisher :
Size : 77824
Detection : Suspicious:SRC!R
Action : Quarantine

7-zip.dll

VirusTotal

With best Regards
Mops21

 

[oldschool]

Two FPs today: Firefox browser extensions Privacy Possum and Emsisoft Browser Security quarantined, but nothing shows under "Quarantine" UI so I could not restore. Once again I failed to capture screenshot prior to taking action but report was sent through UI. You must have much work to do!

 

[AriDfoix]

Once again I failed to capture screenshot prior to taking action

Hi,

tick view hidden files,

move yourself to AppData\Local\Zemana\AntiMalware\reports you will find, unless wiped, a list of files ending with .json

you can open it with notepad

to identify the threat, this product use MD5, like this "DetectionObjects":[{"MD5":"6623C4BCB0C51061EC7F480029FB95DF"

is the MD5 of 7-zip.dll

About the deletion: be sure that quarantine, and not deletion, is ticked:

A personal note to Zemana, using MD5, should be avoided, at least upgrade to SHA1, there are many reasons why is now deprecated. : )

 

[brambedkar59]

Another FP, "Trace- Online Tracking Protection" a Firefox extension which was disabled/deleted (don't remember which one) earlier by me.
C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\yrpmzi65.default\extensions\trash
VirusTotal

 

[harlan4096]

ZAM 3 beta is flagging these files, probably false positives:

• 1 file from Kaspersky.
• 2 files from WiseVector 1.32 (new version -> today).

 

[Mops21]

Hi @ZAM3_PO and Hi @Miss Onnellisuus

The Feedback is submitted via the UI to you

Zemana Anti-Malware 3 is detected 18 Files see my Textfile of it

With best Regards
Mops21

 

[ZAM3_PO]

Hi @ZAM3_PO and Hi @Miss Onnellisuus

The Feedback is submitted via the UI to you

Zemana Anti-Malware 3 is detected 18 Files see my Textfile of it

With best Regards
Mops21

Thank you for informing us @Mops21. I can see that you already reported them as safe. These files should be reanalyzed and you should get accurate detection results after a short while. Let me know if the issue persists.

 

[Mops21]

Thank you for informing us @Mops21. I can see that you already reported them as safe. These files should be reanalyzed and you should get accurate detection results after a short while. Let me know if the issue persists.

Hi @ZAM3_PO

Thank you very much for your Infos that is fixed now i have send you an new E-Mail with some Logs for you

With best Regards
Mops21

 

[Nestor]

There is a FP, i am talking about Heimdal Thor using DNS port 127.7.7.3 Zemana flags it as a DNS hijack and quarantine it.

 

[paulderdash]

With browser cleanup now integrated and not an option (which I hadn't turned on before),
yes Heimdal Thor on 127.7.7.10 here too. Reported as Safe that, plus ...
searx.me search engine on Firefox and 4 entries related to add-ons (all scanned safe with HMP, MB and Emsisoft).

 

[Andrew999]

@ZAM3_PO @Miss Onnellisuus Ccleaner file has been detected in Zemana Anti Logger 2.0 version for a long time now.
Here is link to download file. UPLOAD.EE - CCleaner.exe - Download

CCleaner.exe
Status : Scanned
Object : %programw6432%\ccleaner\ccleaner.exe
MD5 : 1F9EB07F1C292E28C089744D254DE3A2
Publisher : Piriform Software Ltd
Size : 14449664
Version : 5.52.0.6967
Detection : Malware:Win32/Quarand!Atir
Cleaning Action : Report as safe
Related Objects :
File - %programw6432%\ccleaner\ccleaner.exe

VirusTotal

VirusTotal

www.virustotal.com

 

[Mops21]

Hi @ZAM3_PO and Hi @Miss Onnellisuus

I have a new 1 False Positive for you

MD5 : 1193CBE87E8C399B0D52C6789AD560ED
Status : Scanned
Object : c:\program files\7-zip\7-zip.dll
Publisher :
Size : 78336
Detection : Suspicious:SRC!P
Action : Quarantine

7-zip.dll

VirusTotal

VirusTotal

www.virustotal.com

Feedback is send to you via the internal Feedback Function

With best Regards
Mops21

 

[JM Safe]

Hi @ZAM3_PO and Hi @Miss Onnellisuus

I have a new 1 False Positive for you

MD5 : 1193CBE87E8C399B0D52C6789AD560ED
Status : Scanned
Object : c:\program files\7-zip\7-zip.dll
Publisher :
Size : 78336
Detection : Suspicious:SRC!P
Action : Quarantine

7-zip.dll

VirusTotal

VirusTotal

www.virustotal.com

Feedback is send to you via the internal Feedback Function

With best Regards
Mops21

Hello @Mops21 , did you download 7-Zip from the official website (https://www.7-zip.org/download.html ) ?Thank you.