False Positive?

[ronald739]

Reporting a couple of FP's ?

https://www.virustotal.com/gui/file/974a3d4c42d43f1214ffad5195b56afde3984a36b99cdc53a3f259ae450f6be2/detection

https://www.virustotal.com/gui/file/bea11af7044edc91c93f2bdd6f0c7e95e4eba94045f56949b06c8f11198e0257/detection

Regards

[Syazwani Saparman]

Hi ronald739

Thank you for cross checking the files with VirusTotal. Can you send us the sample file so that we can further assist you to set False Positive to the Universal AV.

Many thanks
Syazwani

[ronald739]

Hi Syazwani,

I have sent the files to secureaplus@secureage.com The request number is : (3223).

Regards,
ronald739

[Lech]

Hello,
I also think that I get some false positive for 12 Windows files.

SecureAPlus (freemium) marks those files bellow in the given destinations as containing viruses on the base of APEX or Microsoft Security Essentials.
Strange is, that MSE that I installed to check it doesn’t report any of them during scan itself.
Non of them has also a virus record on Virus Total.
Also on-line scanners like Eset, F-secure and mks_vir reported nothing.
Malware Hunter and Hitman Pro also don’t give any results.

As SecureAPlus reports those viruses or trojans it is not possible to delete the file (Code 05, access denied). It is possible to run real time scan and after it there are three given results – scan incomplete, or no viruses (!), or virus claim again.

I may send the files, but how to do it, to not to cause any problems?
Regards,
Lech

AUDIOKSE
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.23471_none_d50b549f14907e7a

TsUsbGDCoInstaller
C:\Windows\winsxs\amd64_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_7.1.7601.16398_none_6f0f5c629bb8c1b0

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.16385_none_482c18d6d06b2c0d

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.16772_none_4833ef7cd065b8b3

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7600.20914_none_49006e49e950e0ac

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_4a5d2c9ecd59afa7

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_4a184beecd8df1f1

dnsapi
C:\Windows\winsxs\wow64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_4aa4e997e6a8ddc0

rpcrt4
C:\Windows\winsxs\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.24168_none_1ccc8f59a9578796

msv1_0
C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.24150_none_e587aab1c6cd14a6

sqlunirl
C:\Windows\winsxs\x86_microsoft-windows-m..nents-mdac-sqlunirl_31bf3856ad364e35_6.1.7600.16385_none_3bed0e7fdd8193ca

TSpkg
C:\Windows\winsxs\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.24308_none_c657bf3018e45c7f

msv1_0
C:\Windows\winsxs\wow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.24150_none_e587aab1c6cd14a6

rpcrt4
C:\Windows\winsxs\wow64_microsoft-windows-rpc-local_31bf3856ad364e35_6.1.7601.24168_none_1ccc8f59a9578796

[Syazwani Saparman]

Hi Lech!

Thanks for sending this in. We'll have our team check on this. In the future, if you wish to submit false positives you can do so at the following page:

https://www.secureaplus.com/features/antivirus/report-false-positive/

We appreciate your help and we hope you continue to enjoy using SecureAPlus.

Best Regards
Syazwani

[Lech]

Hi Syazwani,
thank you for the link - I will send those files the next day, not tomorrow but the next day alongside with the above description.

I enjoy SecureAPlus - after a year of using it this is the first time something strange was reported.
Calm year, with no problems or troubles.

Regards,
Lech

[Lech]

Hi Syazwani,
I just submitted my infected files as you suggested.
Regards,
Lech

[ronald739]

The FP's I reported are still being flagged as threats. Also, there are two more after a Windows Update to 1903.

[Syazwani Saparman]

Hi ronald739

This is strange. Can I trouble you to send me your SecureAPlus ID via secureaplus@secureage.com (reason being, we don't want other people to know your ID here), while I check with the team as to why the files are still flagged as threats on your machine.

Also, can you send the other two files that were flagged as threats after a Windows Update to 1903?

Yours sincerely,
Syazwani
SecureAPlus Team