107 replies to this topic

[¥akuza112]

dont want to open all time a new topic, so i will start my own false positives thread ;-)

http://linksave.in/

[Arief Prabowo]

Thanks for the report. The link will be checked and any false positive will be fixed soon.

[¥akuza112]

WEBCACHE.GOOGLEUSERCONTENT.COM

[Arief Prabowo]

Thanks for your report. The false positive will be fixed immediately.

[¥akuza112]

195.122.135.58

its battlefield3 server ;-)


http://whois.domaintools.com/195.122.135.58

[Arief Prabowo]

Can you tell me the domain name related to that ip?

[¥akuza112]

there is in my opinion no "active" domain, it was blocked in battlelog.battlefield.com^^

http://www.gametrack...2.135.58:25240/

[Arief Prabowo]

I still don't understand what you mean. Please take a look the guard log to see which host are blocked by EAM.

[¥akuza112]

cant find it -.- // forget it ;-)^^

[¥akuza112]

http://pastie.org/

Hosts, die in Verbindung mit der Verbreitung von Malware stehen (z.B. Adware, Spyware, Trojaner und Viren, etc).

[Arief Prabowo]

Thanks for the report. The false positive was removed.

[¥akuza112]

ad.fly

[Arief Prabowo]

Thanks for your report! The correct domain name is:

adf.ly

The site has been removed from our hosts db. Please run an online update.

[¥akuza112]

http://forum.mysqldumper.de

[¥akuza112]

comment system  : http://intensedebate.com/

[Arief Prabowo]

Thank you. The false positive was fixed.

[¥akuza112]

Hosts, die in Verbindung mit der Verbreitung von Malware stehen (z.B. Adware, Spyware, Trojaner und Viren, etc).

http://www.sempervideo.de/

[Arief Prabowo]

Thanks for the report. The site will be checked.

[¥akuza112]

http://forum.xda-developers.com/

[Arief Prabowo]

The site has been delisted from our hosts db. Thanks!

[¥akuza112]

http://www.deviantart.com/

[¥akuza112]

http://proxy-faq.de/

[Arief Prabowo]

Thanks for the report. The site will be checked.

[Arief Prabowo]

http://proxy-faq.de/

This site is blacklisted by our system due to many riskware/PUA applications hosted there.

[¥akuza112]

hmm in cannot see any riskware ... most programms are network analyser, bruter scanner etc ;-)

http://proxy-faq.de/downloads.html

[¥akuza112]

shoutbox

http://www.fibox.ws/

[¥akuza112]

http://ha.ckers.org/

[¥akuza112]

95.143.195.40

blocked on http://battlelog.battlefield.com/bf3/

http://packetstormsecurity.org/

[Arief Prabowo]

All reported site will be checked. Thank you!

[¥akuza112]

http://narod.ru/ ( http://narod.yandex.ru/ )

[Arief Prabowo]

The false positive was removed. Thanks.

[¥akuza112]

ENJOY Plus!

http://www.enjoystation.net/enjoyplayer/EnjoySetup.exe

[Arief Prabowo]

I'm not sure what do you mean here. I've checked the file, but it's not detected as malware. I also checked the the domain, and it's not blocked too. So where is the false positive?

[¥akuza112]

it detects some things while it wants to install itself ..

[¥akuza112]

http://www.tightvnc.com/

[Arief Prabowo]

The site was delisted from our hosts db. Thank you.

[¥akuza112]

http://www.favicon.cc/

[¥akuza112]

C:\XAMPP\APACHE\BIN\HTTPD.EXE
C:\XAMPP\XAMPP-CONTROL.EXE



Downloaded from : http://www.apachefri...xampp-beta.html
[08.06.12 12:12] xampp-win32-1.8.0-beta7-vc9.7z (84 MB)

[Arief Prabowo]

http://www.favicon.cc/

The host was delisted.

C:\XAMPP\APACHE\BIN\HTTPD.EXE
C:\XAMPP\XAMPP-CONTROL.EXE

Downloaded from : http://www.apachefri...xampp-beta.html
[08.06.12 12:12] xampp-win32-1.8.0-beta7-vc9.7z (84 MB)

That is behavior blocker, not false positive detection.

[¥akuza112]

http://downloads.ziddu.com

[Arief Prabowo]

The host was delisted. Thanks!

[¥akuza112]

http://dvdvideosoft.com/

[Arief Prabowo]

The host was delisted from hosts db. Thanks!

[¥akuza112]

http://www.autohotkey.com

[Arief Prabowo]

The host was delisted.

[¥akuza112]

http://pastehtml.com

[Elise]

Thank you, this host has been removed from our hosts blacklist.

[¥akuza112]

http://theprivynews.net/

[Arief Prabowo]

This is not a false positive. The site involved with phishing.

[¥akuza112]

This is not a false positive. The site involved with phishing.

ehm lol ...

naja wayne