Announcement

Collapse
No announcement yet.

How to diagnose and/or report antivirus/antispyware false positives

Collapse
This topic is closed.
X
This is a sticky topic.
X
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to diagnose and/or report antivirus/antispyware false positives

    NOTE: Only valid for ZA versions 10 or above.


    First seek confirmation of the false detection; upload the file(s) to www.virustotal.com . If confirmed:
    Go to the advanced settings of the antivirus/antipsyware section (Scan Option) and UNcheck "Enable automatic treatment". Restore the file from Quarantine and next time the threat is detected, you will be able to exclude it ("ignore always" or "ignore once").

    Send the file(s) in a password protected zip to newvirus at kaspersky dot com. Subject: false positive. Include password in the e-mail. Or submit via https://newvirus.kaspersky.com/

    Please also report the name of the detection in the e-mail.

    Note that:
    You can exclude the files from the 'on-access' scanning under the advanced settings of the antivirus/antispyware section (Exceptions)
    You can exclude the files from the 'on-demand' scanning under the advanced settings of the antivirus/antispyware section (Scan target)


    REMEMBER to remove the exclusions once the false positive has been corrected!

    Cheers,
    Fax

    ** To create a password protected zip see here: https://windowsreport.com/password-protect-zip-file/
    Last edited by fax; November 26th, 2018, 11:38 AM.

    ZoneAlarm Extreme Security
    Click here for ZA Support
    Monday-Sunday 24x7
Working...
X