Sign in to follow this  

Worm.Win32.Mefir!IK - False positive?

Recommended Posts


This is false positive? I sent for analysis several times already.

C:\WINDOWS\Help\Tours\htmlTour\safe_faster.htm detected: Worm.Win32.Mefir!IK link

Share this post

Link to post
Share on other sites

Hi buhera,

The file (the same location and the name) is not flagged here with the latest signatures (see attached)

Actually that was never flagged here

So if you are using the latest signatures and the file is still flagged after submitting from the detection list

you can submit to EMSI [email protected]

Before submitting, create a password protected archive (ZIP or RAR) containing the file(s). Make sure the main body of the email contains the password for the compressed archive.

My regards

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.