siliconman01
Global Moderator
Trojans! Chew 'em Up, Spit 'em Out...
Gender: 
Posts: 5671
|
 |
How do I report a False Positive ?
« on: May 19th, 2008, 4:39am » |
|
Mischel Internet Security works diligently to ensure that the rulesets for TrojanHunter are accurate and error free. However, with the thousands of software and hardware combinations around the globe coupled with the hundreds of thousands of malicious elements issued by cybercriminals, it is inevitable that a False Positive will occur.
Should you experience a False Positive or suspect that there is a False Positive, please follow the procedure below to submit a support request for correction.
1. Run the suspect file through either Jotti or VirusTotal to determine if other security scanners are detecting the file as malicious.
http://virusscan.jotti.org/
http://www.virustotal.com/
NOTE: If you cannot locate the file on your computer, be sure that you have made all your files and folders visible as per the instructions in the link below.
http://www.misec.net/forum/board/FAQ/1139610900
NOTE: If none of the above scanners state the submitted file is malicious, DO NOT allow TrojanHunter to quarantine the suspect file. Wait for your submitted file to be analyzed by Mischel Internet Security.
2. On the forum, check to see if any other users are experiencing the same False Positive. If so, post your feedback on the same forum thread.
If not, create a new forum post describing your False Positive. Create the post under the forum section "TrojanHunter Scanner".
- Please show the file that is being falsely detected and the name of the detection. (Example: C:\Windows\System32\XYZGOOD.dll detected as "Trojan Ducktoy.100").
- Also state your Windows Operating System with the Service Pack number.
- Provide any other information that you feel is pertinent.
3. Submit the offending file via e-mail to Submit@misec.net
- In the e-mail subject, include the words "False Positive"
- Zip the file that is being detected and submit it as an attachment in the e-mail.
- In the body of the e-mail, include a link to the Forum post about the False Positive.
- Include a description of what you are experiencing concerning the False Positive.
After Magnus or Gavin have analyzed the submitted file, they will correct (if necessary) the offending ruleset and issue a correction update. You should also receive an email from them providing instructions concerning your submittal.
|
Mischel Internet Security Forum
Notify of replies
Send Topic
Print
Author
IP Logged
Search
Members
Login
Register