Assigned Zemana False Positive Report Thread

[DJ Panda]

Name: Rocket League (Steam Bought)
VT: Antivirus scan for 8fe1675671c0ae4c3d09ba65fb77bc503ead075eae8792b4f9f85253bfb05e0d at 2016-09-15 23:11:12 UTC - VirusTotal (2/57)
Picture:

 

[TwinHeadedEagle]

Yes, I know about this problem. We will try to fix it in next release. Can you please send feedback through ZAM gui? Thanks!

 

[Andytay70]

not had any issues so far.
Using ZAM as a replacement for Malwarebytes anti-malware which was using nearly 300mb ram on a clean machine!

 

[Lord Ami]

Webroot File Submission
It has other stuff in the URL but I think it's my WR info or something.

 

[Mops21]

Hi

I have 1 File for you for check

nedb.ini
Status : Gescannt
Pfad : NE->c:\users\alexander robrecht\appdata\local\zemana\zemana antimalware\nedb.ini
MD5-Hash : -
Herausgeber : -
Größe : -
Version : -
Bedrohung : Virus:Test/Eicar.Hex!Neng
Gewählte Aktion : Quarantäne
Verwandte Objekte :
(null) - (null)


nedb.ini

https://www.virustotal.com/en/file/...fc845362ece741bcad7f0099/analysis/1474382020/

I Report the File to AVG

With best Regards
Mops21

 

[TwinHeadedEagle]

Yes, this will be fixed, thanks

 

[Mops21]

Yes, this will be fixed, thanks

Thank you very much for your Info

With best Regards
Mops21

 

[Lord Ami]

View attachment 115613
Webroot File Submission
It has other stuff in the URL but I think it's my WR info or something.

UP

 

[Mohan Rajan]

I have this FP relating to RRShell.dll that is part of Regrun Suite from Greatis Software.
This file is being flagged all the time by ZAL.
I have set it to exclude this but to no avail.
Any thoughts?

 

[TwinHeadedEagle]

It shouldn't be flagged anymore, please let me know. Thanks!

 

[siren05]

Hi

Im getting this while i scanned my pc.


VMware Network Adapter VMnet8
Status : Scanned
Object : VMware Network Adapter VMnet8 10.4.0.1
MD5 : -
Publisher : -
Size : -
Version : -
Detection : DNS Hijack

Is it a false alert or something else?

thanks

 

[tiongkey]

Hello, please use this thread to report false positives instead of making a separate thread, also I will tag @iIda15 and @TwinHeadedEagle so the false positives can be fixed

Hi! I'm Gio from Insync (www.insynchq.com). One of our users reported getting a "Harmful objects detected!" on one of the .dll files message when trying to install our software:
https://uploads.intercomcdn.com/i/o/13407556/3aa67c2711b5b62a041df6b0/2016-11-18_15-28-30.png

 

[TwinHeadedEagle]

Hi and thanks for reporting. Can you send me this .dll file?

Anyway, it should be fixed now.

 

[Mops21]

Hi

I have 1 File for you for check

DesktopStartMenuReviverService.exe.infected
Status : Gescannt
Object : %userprofile%\pictures\xsec\x-sec\false positives please check part 29\desktopstartmenureviverservice.exe.infected
MD5 : 663533B07B7C6E4893A48832641D815B
Publisher : ReviverSoft
Size : 765048
Version : 1.0.0.40
Detection : Scareware:Win32/FakeOptimizer!Ep
Cleaning Action : Quarantäne
Related Objects :
Datei - %userprofile%\pictures\xsec\x-sec\false positives please check part 29\desktopstartmenureviverservice.exe.infected

DesktopStartMenuReviverService.exe.infected

Antivirus scan for d23d4341b92af4ae2c98681dd5ea035e7a47869e024b886aad11be9939c3ed53 at 2016-11-19 13:13:52 UTC - VirusTotal

Need you the File

With best Regards
Mops21

 

[TwinHeadedEagle]

Yes, this is PUA detection. It is in our blacklist and you can set it to exclusions if you want.

 

[Mops21]

Yes, this is PUA detection. It is in our blacklist and you can set it to exclusions if you want.

Ah okay thank you very much for your Info

With best Regards
Mops21

 

[Der.Reisende]

Could you please check this file here please?
I think it is a FP.

Antivirus scan for 8e3e47c66ec72d147aad89e2d4b8c88cd7484cb214fa17776622a8c67fcd26a7 at 2016-12-01 11:12:42 UTC - VirusTotal
Location: C:\Program Files\Common Files\Doctor Web\Scanning Engine

Thank you!

 

[TwinHeadedEagle]

Probably low reputation detection. What it belongs to?

 

[Der.Reisende]

Probably low reputation detection. What it belongs to?

Dr. Web Security Space 11 latest version. Quick google scan told me the file has been part of previous versions also.
NPE, HMP and GetSusp show no malicious indicators.

 

[TwinHeadedEagle]

It should be fixed now.