Page 1 of 1

Immunet reports Sality Virus.

Posted: 31 Oct 2018, 04:15
by Redlow
I just tried to use Filebot for the first time after a while, and my immunet reported a Sality virus issue. I reinstalled, and still it quarantined both the launcher and the main executable. I am assuming it's a false positive, and perhaps you may want to test yourself. I have restored from quarantine and the program works fine. I did want you to be aware, as perhaps it needs to be whitelisted.

System:
Windows 10

How did you install FileBot?
Windows Store

Include Screenshots
Image
Image

Use the Groovy Pad and run runScript 'sysinfo' (press F5, and then press F5 again)

Code: Select all

FileBot 4.8.4 (r5829)
JNA Native: 5.2.2
MediaInfo: 18.05
7-Zip-JBinding: 9.20
Chromaprint: 1.4.2
Extended Attributes: OK
Unicode Filesystem: OK
Script Bundle: 2018-10-05 (r536)
Groovy: 2.5.1
JRE: Java(TM) SE Runtime Environment 10.0.2
JVM: 64-bit Java HotSpot(TM) 64-Bit Server VM
CPU/MEM: 12 Core / 15 GB Max Memory / 161 MB Used Memory
OS: Windows 10 (amd64)
Package: APPX
License: Microsoft Store License
Cheers!
Redlow

Re: Immunet reports Sality Virus.

Posted: 31 Oct 2018, 04:58
by rednoah
The Windows Store executables shouldn't be an issue, since they can't be modified after being submitted to the Store and are presumably also checked and tested by Microsoft against malware.

Does ClamAV not have a built-in way to report false positives? Not much I can do on my side. The AV provider will hopefully whitelist at some point, but I haven't seen any way to request that on their website.

Re: Immunet reports Sality Virus.

Posted: 31 Oct 2018, 20:59
by kim
1 / 66
ClamAV = Win.Virus.Sality-6735642-0
https://www.virustotal.com/#/file/e7d60 ... /detection

Re: Immunet reports Sality Virus.

Posted: 01 Nov 2018, 12:49
by Redlow
I guess this is where you can submit a file that is reporting a false positive.

http://www.immunet.com/false_positive

I did submit a false positive report.

Re: Immunet reports Sality Virus.

Posted: 02 Nov 2018, 04:08
by rednoah
Redlow wrote:
01 Nov 2018, 12:49
I did submit a false positive report.
Thanks. Much appreciated.