Assigned Zemana False Positive Report Thread

[eonline]

I think MercadoLibre is safe, make a lot of purchases there and is the most popular buy and sell site in Latin America. Thank you very much. Best regards.

 

[JM Safe]

@Lobito Punky Smart RSS extension has a low popularity, we need to wait for the community to trust this file or not.

 

[JM Safe]

@Lobito Punky you can add Smart RSS to exlusions while we are checking it.

 

[eonline]

@JM Safe Thank you very much. Regards!

 

[eonline]

VirusTotal

VirusTotal

www.virustotal.com

@JM Safe I leave this around here for you to analyze. Thank you very much.

 

[JM Safe]

View attachment 212554

VirusTotal

VirusTotal

www.virustotal.com

@JM Safe I leave this around here for you to analyze. Thank you very much.

Thank you, we will look into it.

MD5 : 9E30EDC57975A66067EC07EE6868592F
Status : Scanned
Object : c:\program files\nvidia corporation\display.nvcontainer\plugins\localsystem\displaydriverras\_displaydriverras.dll
Publisher : NVIDIA Corporation
Size : 2203008
Detection : Suspicious:SRC!P
Action : Quarantine

VirusTotal

This file is really new, we have to wait for the community. You can put it in exclusions while we are checking it.

 

[JM Safe]

View attachment 212554

VirusTotal

VirusTotal

www.virustotal.com

@JM Safe I leave this around here for you to analyze. Thank you very much.

Hello @Lobito Punky according to our analysis this extension adds in its whitelist some really suspicious and unwanted sites.

 

[eonline]

Thank you very much! Eliminated with ZAM! Regards.

Edit: was nano defender for firefox

 

[eonline]

the issue of mercadolibre I reported it I believe that by 2015 ... but it is up to you. It comes as a search engine integrated in FF in the Argentine version. Thank you.

 

[Gandalf_The_Grey]

Had a false positive when scanning my laptop with the new Hard Configurator beta ver. 4.0.1.0 from @Andy Ful installed.
Reported it as false positive through the GUI:

Scan Information

Product Name	:	Zemana AntiMalware
Scan Status	:	Completed
Scan Date	:	5/8/2019 10:49:11 PM
Scan Type	:	Smart Scan
Scan Duration	:	00:00:25
Scanned Objects	:	1711
Detected Objects	:	1
Excluded Objects	:	1
Auto Upload	:	True
OS	:	Windows 10 x64
Processor	:	4X Intel(R) Core(TM) i5-4210H CPU @ 2.90GHz
BIOS Mode	:	UEFI
Domain Info	:	WORKGROUP,False,NetSetupWorkgroupName
CUID	:	12A4A2B8F0FFDA86243619

Detections

MD5	:	AC16E3678126F5779917D3E3369A117A
Status	:	Scanned
Object	:	c:\windows\hard_configurator\runassmartscreen(x64).exe
Publisher	:
Size	:	1008128
Detection	:	Suspicious:SRC!R
Action	:	Report
-----------------------------------------------------------------------

 

[JM Safe]

Had a false positive when scanning my laptop with the new Hard Configurator beta ver. 4.0.1.0 from @Andy Ful installed.
Reported it as false positive through the GUI:

Hello Gandalf, we will look into it, thanks for reporting it

@Gandalf_The_Grey this file is quite new, the automated systems will analyze it and give the exact result. Until this day the file will be marked as suspicious.

 

[Andrew999]

Hello Gandalf, we will look into it, thanks for reporting it

@Gandalf_The_Grey this file is quite new, the automated systems will analyze it and give the exact result. Until this day the file will be marked as suspicious.

Does Suspicious:SRC!R mean machine learning or something, or cloud. Then does the Cloud analyse stuff over time? Then whitelist then blacklist it eventually if it is malware? Also is this automatic?

It is very interesting it seems.

 

[JM Safe]

Does Suspicious:SRC!R mean machine learning or something, or cloud. Then does the Cloud analyse stuff over time? Then whitelist then blacklist it eventually if it is malware? Also is this automatic?

It is very interesting it seems.

Hello Andrew,
Suspicious files are unknown and we classify them. Most probably they are new files and we need to wait for community score and we need time to verify that files.

 

[Andrew999]

Here is link to download. UPLOAD.EE - False_positives.zip - Download
There is 2 false positives, both of them are for a game called Rust.

 

[Mops21]

Hi @@JM Safe and Hi @@Miss Onnellisuus and Hi @@ZAM3_PO

I have anotherone False Positive for you see my screenshot

The Feedback is submiited via the function to you

MD5 : B426D756F7406C017882FEB7AEADB1EF
Status : Scanned
Object : c:\program files (x86)\adobe\acrobat reader dc\reader\air\nppdf32.dll
Publisher : Adobe Inc.
Size : 267312
Detection : Suspicious:SRC!R
Action : ReportAsFP

nppdf32.dll

VirusTotal

VirusTotal

www.virustotal.com

With best Regards
Mops21

 

[JM Safe]

Hi @@JM Safe and Hi @@Miss Onnellisuus and Hi @@ZAM3_PO

I have anotherone False Positive for you see my screenshot

The Feedback is submiited via the function to you

MD5 : B426D756F7406C017882FEB7AEADB1EF
Status : Scanned
Object : c:\program files (x86)\adobe\acrobat reader dc\reader\air\nppdf32.dll
Publisher : Adobe Inc.
Size : 267312
Detection : Suspicious:SRC!R
Action : ReportAsFP

nppdf32.dll

VirusTotal

VirusTotal

www.virustotal.com

With best Regards
Mops21

Hi @Mops21, that is fixed.

Here is link to download. UPLOAD.EE - False_positives.zip - Download
There is 2 false positives, both of them are for a game called Rust.
View attachment 213578

Hello Andrew, we will look into them.

 

[Mops21]

Hi @Mops21, that is fixed.


Hello Andrew, we will look into them.

Hi @JM Safe

Thank you very much for your Infos

With best Regards
Mops21

Hi @@JM Safe and Hi @@Miss Onnellisuus and Hi @@ZAM3_PO

I have anotherone False Positive for you see my screenshot

The Feedback is submiited via the function to you

MD5 : B426D756F7406C017882FEB7AEADB1EF
Status : Scanned
Object : c:\program files (x86)\adobe\acrobat reader dc\reader\air\nppdf32.dll
Publisher : Adobe Inc.
Size : 267312
Detection : Suspicious:SRC!R
Action : ReportAsFP

nppdf32.dll

VirusTotal

VirusTotal

www.virustotal.com

With best Regards
Mops21

Hi all and @JM Safe

This is not fixed yet i get this Infos from the Support Team from you that is an info for you all

Hello, we will look into it.

We took actions to solve the issue but this will take some time.

With best Regards
Mops21

 

[plat]

Hi Zemana! I have submitted a false positive (Cloudflare) on new version 3.1.200 thru the interface.

Scan is nice and fast and interface is still nice and easy to navigate from the first beta. :emoji_ok_hand:

Spoiler

 

[JM Safe]

Hi Zemana! I have submitted a false positive (Cloudflare) on new version 3.1.200 thru the interface.

Scan is nice and fast and interface is still nice and easy to navigate from the first beta. :emoji_ok_hand:

Spoiler

View attachment 213612

Thank you very much @plat1098 !

 

[Moonhorse]

MD5 :
Status : Scanned
Object : c:\users\joni\appdata\local\google\chrome\user data\default\extensions\fofomggefchbeiemhdhacdojbefmkhfb
Publisher :
Size : 0
Detection : HijackExt:ChromePlugin/SmartAdblock
Action : Delete

Reported as safe