Re: False positives on antivirus

[Ron <ron () skullsecurity net>]

Fyodor <fyodor () insecure org> wrote:
> Note that nmap-5.21-setup.exe seems to trigger 2 false postivies.  The
> Panda W32/Xor-encoded.A and McAfee+Artemis judges it
> "Suspect-D!10FC121FDD0D":
Suspect-D, I like the sounds of that. It's like an action movie! 

But seriously, I hadn't realized it could be so easy to get a false positive removed. Maybe we should revisit the idea 
of submitting the original nmap_service.exe, unmodified, to the company that detected it as malware?
-- 
Ron Bowes
http://www.skullsecurity.org
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/