Comment on How to indentify false positives

artwork@lemmy.world ⁨1⁩ ⁨day⁩ ago

Wonderful day!

Depending on the anti-malware, it may be either a known signature, or heuristics.
- In case of the former, the signature may be a just a single use of function inside the safe program that matches with a malware that uses the same (e.g., in a thread or memory range the anti-malware probed);
- Heuristics - May just be too restrictive local security settings;

Yet, if you don’t have enough time to investigate in locally in isolated environments as virtual machines/containers, debugging syscalls and activities in file-system, memory, network etc., there are less manual or outsources, options, including the common know ones:
- opentip.kaspersky.com
- opentip.kaspersky.com/requests
- virustotal.com/gui/
- any.run

Please stay safe!

original
Sort:hotnewtop