Immunet reports Sality Virus.

Support for Windows users
Post Reply
Redlow
Posts: 2
Joined: 31 Oct 2018, 03:52

Immunet reports Sality Virus.

Post by Redlow »

I just tried to use Filebot for the first time after a while, and my immunet reported a Sality virus issue. I reinstalled, and still it quarantined both the launcher and the main executable. I am assuming it's a false positive, and perhaps you may want to test yourself. I have restored from quarantine and the program works fine. I did want you to be aware, as perhaps it needs to be whitelisted.

System:
Windows 10

How did you install FileBot?
Windows Store

Include Screenshots
Image
Image

Use the Groovy Pad and run runScript 'sysinfo' (press F5, and then press F5 again)

Code: Select all

FileBot 4.8.4 (r5829)
JNA Native: 5.2.2
MediaInfo: 18.05
7-Zip-JBinding: 9.20
Chromaprint: 1.4.2
Extended Attributes: OK
Unicode Filesystem: OK
Script Bundle: 2018-10-05 (r536)
Groovy: 2.5.1
JRE: Java(TM) SE Runtime Environment 10.0.2
JVM: 64-bit Java HotSpot(TM) 64-Bit Server VM
CPU/MEM: 12 Core / 15 GB Max Memory / 161 MB Used Memory
OS: Windows 10 (amd64)
Package: APPX
License: Microsoft Store License
Cheers!
Redlow
User avatar
rednoah
The Source
Posts: 22923
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Immunet reports Sality Virus.

Post by rednoah »

The Windows Store executables shouldn't be an issue, since they can't be modified after being submitted to the Store and are presumably also checked and tested by Microsoft against malware.

Does ClamAV not have a built-in way to report false positives? Not much I can do on my side. The AV provider will hopefully whitelist at some point, but I haven't seen any way to request that on their website.
:idea: Please read the FAQ and How to Request Help.
kim
Power User
Posts: 1251
Joined: 15 May 2014, 16:17

Re: Immunet reports Sality Virus.

Post by kim »

1 / 66
ClamAV = Win.Virus.Sality-6735642-0
https://www.virustotal.com/#/file/e7d60 ... /detection
Redlow
Posts: 2
Joined: 31 Oct 2018, 03:52

Re: Immunet reports Sality Virus.

Post by Redlow »

I guess this is where you can submit a file that is reporting a false positive.

http://www.immunet.com/false_positive

I did submit a false positive report.
User avatar
rednoah
The Source
Posts: 22923
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Immunet reports Sality Virus.

Post by rednoah »

Redlow wrote: 01 Nov 2018, 12:49 I did submit a false positive report.
Thanks. Much appreciated.
:idea: Please read the FAQ and How to Request Help.
Post Reply