Posts: 266
Threads: 0
Joined: Aug 2007
Reputation:
0
2xbrook
The only possibility to remove false alarms is to not including problematic applications but this is the road to nowhere. Even if you report the issue to the authors of antiviruses, you can never be sure that it will not appear anymore. You don't know will other app be in their databases if the future either.
To have false feeling of security we should remove: FtpPasswordRipper, Revelation, wbx plugins and maybe something more. This list can never end. What if some day i.e. Avira will alert you that "XNResourceEditor is suspicious". Should we also remove this tool?
Posts: 266
Threads: 0
Joined: Aug 2007
Reputation:
0
2m^2
I know we should do "something" but...
IIRC Ultima sent once an info to Nod32 authors and they corrected their databases for short period of time. Few db updates later problem returned.
I agree that mentioned tools could be removed and maybe WBX'es (are they used?).
PS. Sorry if it was other antivirus.
Posts: 53
Threads: 5
Joined: Jun 2008
Reputation:
0
08-14-2008, 03:09 PM
(This post was last modified: 08-14-2008, 03:10 PM by John.)
Ok, I got good news for everyone! This is my third time I have submitted the sample of "starter.wbx" to the Avira virus labs and finally they agreed that this was a false positive. Below is the partial copy of the e-mail I have received from them:
Dear Sir or Madam,
Thank you for your email to Avira's virus lab.
Tracking number: INC00191227.
A listing of files alongside their results can be found below:
File ID - 3813759
File size - 6.5 KB
File name - starter.wbx
Result - FALSE POSITIVE
The file 'Starter.wbx' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Posts: 721
Threads: 3
Joined: Nov 2006
Reputation:
2
Big thanks John, this is very good news
and
Veľká vďaka ešte raz Vladimír.