Lista Firme Homepage
Forum Home Forum Home » CD-ul ListaFirme » Diverse
  Noi Postari Noi Postari RSS Feed - SDBot.Gen8 detection - false positive
  FAQ FAQ  Cautare Forum   Inregistrare Inregistrare  Login Login

SDBot.Gen8 detection - false positive

 Raspunde Raspunde
borgdesign View Drop Down
Admin Group
Admin Group

Aderat: 01 Jan 2006
Locatie: Romania
Status: Offline
Puncte: 485
Optiuni Postare Optiuni Postare   Multumiri (0) Multumiri(0)   Citeaza borgdesign Citeaza  RaspundeRaspunde Link Direct la Postare Subiect: SDBot.Gen8 detection - false positive
    Postat: 25 May 2009 la 12:18
Unii antivirusi pot detecta versiunea 4.1.2 Retail ca fiind infectata cu SDBot.Gen8
In urma raportarilor produsul a fost transmis catre analiza la F-Secure constatand ca detectia este falsa, conform corespondentei de mai jos:

Thank you for your e-mail.

The file you submitted is indeed clean. A database update will be released to resolve this issue.

For the latest database updates please visit this page:

We apologize for any inconveniences that this may have brought you.

Should you have further questions, please do not hesitate to email us again.

Have a nice day!

F-Secure Security Labs    
F-Secure Corporation      

-----Original Message-----
Date: Thu, 21 May 2009 11:15:55 +0000
Subject: SAS:3960 : False positive :

> SampleType: False positive
> E-mail:
> Name: Diac Iustin
> Country: RO
> Phone:
> Source:
> OS: Windows XP
> Product: Other or Unknown
> ProductVersion:
> DetectionName: SDBot.Gen8
> UpdatesVersion:
> Subject: False positive
> Description:
> Our customers using F-Secure are reporting SDBot.Gen8 detection.
> Our app is using Themida as protection.
> Need an answer for our customers, it is a virus or a false positive?

Sent: Monday, May 25, 2009 1:26 PM
Subject: RE: [virus a variant of Win32/Packed.Themida application] Re: [virus a variant of Win32/Packed.Themida application] fals pozitiv

Buna ziua,

Fisierul lstfirme.exe nu este detectat ca fiind virusat de nod32.

 Cu stima,

ESET NOD32 Romania Suport Tehnic

Antivirusii care detecteaza (fals) virus:
Norman, Sophos, ClamAV
Cauza: aplicatia este protejata cu sistemul Themida (pentru care unii antivirusi fac confuzie)

Editat de borgdesign - 25 May 2009 la 14:58
Inapoi Sus
 Raspunde Raspunde
  Share Topic   

Schimba Forum Permisiuni forum View Drop Down