Page 1 of 1

False Negative Results of Antiviruses

Posted: Sun Aug 11, 2019 12:02 pm
by x22x22
Hello,

Normally, my application virustotal result is 3/65. But when I try to use just virtualization (others are disabled memory protection, packing, etc...) on one function result changes as 15/65 and most antiviruses threat detection is "Gen:Variant.Ursu".

What should I do to decrease these false negative results?
Do you have any suggestion?

Image

Re: False Negative Results of Antiviruses

Posted: Sun Aug 11, 2019 12:06 pm
by Admin
Try to contact these antiviruses and inform them about this bug.

P.S. I don't see any "top" antiviruses in this list (like KAV, ESET), just only crap :))

Re: False Negative Results of Antiviruses

Posted: Sun Aug 11, 2019 12:11 pm
by x22x22
Can code signing certificate helps to decrease false negative results?

Re: False Negative Results of Antiviruses

Posted: Sun Aug 11, 2019 12:15 pm
by Admin
Do you really think that these guys check a code signature in own "products"? I don't think so. Anyway, you can check it by yourself.

P.S. It seems many of them use an engine from BitDefender.

Re: False Negative Results of Antiviruses

Posted: Sun Aug 11, 2019 12:49 pm
by x22x22
Thank you, I sent an email to bitdefender.