Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Combofix false positive on AdVantage Veterinary Software


  • Please log in to reply
3 replies to this topic

#1 Marcel Brown

Marcel Brown

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:11 AM

Posted 17 January 2013 - 04:21 PM

Just to start, I have been using Combofix for several years, successfully removing malware that no other software could detect (nor remove so quickly and effectively). So I'm not a newbie or neophyte when it comes to malware removal.

I've run into a situation where Combofix is detecting a legitimate veterinary software as a malware. I was able to restore the software files from quarantine so no big deal, but I'm wondering how to report a false positive to the author of Combofix. After searching through Bleepingcomputer.com, it appears this is the best way to communicate with Combofix's author. But please point me in the right direction if I am mistaken.

I've had this happen twice now, a few months apart, so I don't think it is an isolated incident. And I don't think that Combofix is legitimately removing an infected file because it removes the entire directory (after removing every single subdirectory and every single file).

Here is the directory that Combofix detects as malware:

C:\Program Files (x86)\AdVantage\

Both incidents have been on Windows 7 Professional 64-bit

I'm guessing that there must be a malware with the name of "advantage" that Combofix is confusing with the legitimate veterinary software of the same name.

Any help anyone can provide in providing this information to the Combofix author or pointing me in the right direction would be appreciated!

BC AdBot (Login to Remove)

 


#2 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,743 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:05:11 AM

Posted 17 January 2013 - 04:39 PM

We will get a message regarding the information you provided to the author. Thank you for advising us of the issue.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+

#3 Marcel Brown

Marcel Brown
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:11 AM

Posted 17 January 2013 - 04:44 PM

Thank you!

#4 Animal

Animal

    Bleepin' Animinion


  • Site Admin
  • 34,743 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Where You Least Expect Me To Be
  • Local time:05:11 AM

Posted 17 January 2013 - 05:08 PM

My Pleasure.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown (1938-1994)


A learning experience is one of those things that say, "You know that thing you just did? Don't do that." Douglas Adams (1952-2001)


"Imagination is more important than knowledge. Knowledge is limited. Imagination circles the world." Albert Einstein (1879-1955)


Follow BleepingComputer on: Facebook | Twitter | Google+




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users