(SOLVED) ZA-Scan - False positive

[CarlosTurco]

Hi,

 

I have a file that is being detected as a threat. But this is a false positive. The tool (ZA-SCAN.EXE) developed by Smeenk is used in forums, to help the user in removing malware.

 

Link VT: https://www.virustotal.com/pt/file/73fbb8072f38637f39bd4018b87df4003e5d5f9296d5c43b42d564bf15091de3/analysis/1423331267/

 

 

Regards,

 

 

[GuiltySpark]

Hi carlos

 

I can see in the virustotal that sophos shows it to be a NirCmd and given that smeenk create HJThis it's not surprising it's being flagged due to its nature.

 

I'm sure when the Malware Research team see this they will adjust the definition files, but to be sure (if you havent done so already) please use the inbuilt FP reporter.

 

Thanks.

[CarlosTurco]

Thanks GuiltySpark,

 

 

I'm sure when the Malware Research team see this they will adjust the definition files, but to be sure (if you havent done so already) please use the inbuilt FP reporter.

 

I will go to do it! 

 

Regars,