CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 951
Comments: 28
block bottom
spacer spacer

e-mail to submit virus

 
Post new topic   Reply to topic       All -> FavForums -> Prevx [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Shtorm

Guest
IP: 86.110.*.*






PostPosted: Sat Jun 07, 2008 4:25 pm    Post subject: e-mail to submit virus
Reply with quote

Hello.

I have a set a virus, yet not detected Prevx. How I can send them in prevx? Whether is at them e-mail for new viruses?

Back to top
horseman

Lieutenant
Lieutenant
Premium Member

Joined: Apr 15, 2003
Posts: 232

Premium

PostPosted: Mon Aug 25, 2008 9:10 am    Post subject: Re: e-mail to submit virus
Reply with quote

Shtorm wrote:
Hello.

I have a set a virus, yet not detected Prevx. How I can send them in prevx? Whether is at them e-mail for new viruses?


For future reference (as this is now an "aged" topic) then recommended procedure could be something like:

1. Affirm this isn't a false+ flagged by another AV product by possibly submitting file to say, VirusTotal -
http://www.virustotal.com/

2. Affirm this isn't an "out-of-scope" item eg script, by specifying extension/file type.

3. Affirm latest status by using Research Tracker and also specifying PX5/MD5 identifier (or url/address).
PX2 Console > Advanced > Research Tracker > Add ..... upload or d/click to check PAWS database.

4. Added any additional recreation scenario if known eg website or source of suspicious item and how(if any) existing AV product detected it.

Assuming you covered all the above you could raise a support ticket using the support option and detail your findings.
PX2 Console > Support
Also or perhaps preferably) when using Research Tracker(item 3 above) you can click on "Disagree with this determination" (on top right hand resulting screen display of database item) and again state your reasons/findings?

FWIW in practise over last 3 years I've personally found few false-'s but many false+'s from other AV's. Also to be fair I 've found quite a few false+'s from PX itself although following above process these have invariably been corrected within hours!


_________________
Regards Tony

Draco Dormiens Nunquam Titillandus
Back to top
View users profile Send private message MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Prevx All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer