Gen.Variant.MSILHeracles.da651960 false positive?

Options
Pedroj
Pedroj Posts: 53  Ally Member
First Anniversary 10 Comments
in Security

Hi, I've started getting multiple malware notifications with this definition:
Gen.Variant.MSILHeracles.da651960
False positive? I don't see references about this malware in Zyxel.
Can you help me?

All Replies

  • [Deleted User]
    [Deleted User] Posts: 0  Freshman Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi,

    If you have the hash for this potential malware, you can search for it here:

    https://threatintelligence.zyxel.com/malware

    Thanks!

  • Pedroj
    Pedroj Posts: 53  Ally Member
    First Anniversary 10 Comments
    Options

    Hello, I don't have hash

    1.PNG

  • itariant
    itariant Posts: 15  Freshman Member
    First Anniversary 10 Comments
    Options

    Hello, on ATP500

    image.png

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,083  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Dear all users,

    This problem should be same as this discussion:

    https://community.zyxel.com/en/discussion/16830/anti-malware-false-positive-or-real

    We are currently investigating the problem. Please add the File Pattern "AD2F1837.HPPrinterControl*" on the Allow list in your Anti-Malware settings:

    Here is the on-premise firewall setting:

    file apttern allow tilist.png

    Here is the Nebula firewall setting:

    file apttern allow list- Nebula.png

    We will provide an update as soon as we have more progress. Thank you for your patience.

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,083  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Dear all users,

    Thank you for your patience, and we apologize for any inconvenience caused. We are committed to improving the processing workflow for handling false-positive detections in the future. Additionally, we have made some corrections to the latest Anti-Malware signature. Therefore, we kindly request you to update the signature to the latest version (20230517) and verify whether the false-positive detection issue has been resolved. Once again, we appreciate your understanding and cooperation.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）