Anti-Malware False-positive or Real?

Options
124

All Replies

  • atilla
    atilla Posts: 1
    First Comment
    Options

    same here, ATP500.

    Application.SystemInformer.2b5a37bd

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 771  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Dear Customer,

    We have removed this pattern. Please kindly wait the next signature 0515 and check if the false alarm stop.

    Thank you

  • OTADMIN
    OTADMIN Posts: 15  Freshman Member
    First Anniversary 10 Comments Friend Collector
    Options

    Hey, here also a lot of pc's who give that message.

    We use pdq to update our computers, and find out that al the pc's that give the messages have Firefox 113.0.1 installed this morging.

    So probably it has something todo with this update.

  • ChipConnJohn
    ChipConnJohn Posts: 44  Freshman Member
    First Anniversary 10 Comments Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula
    Options

    I'm getting Application.SystemInformer.2b5a37bd alerts too. ATP200.

    Seriously, Zyxel. You need a better system of removing these false positives. I've been jumping through hoops for a week and a half trying to get the MSILHeracles worked out with you. It's like you have no internal testing and wait for problems to happen to the users, then take a week+ to resolve the issue. I can't continue to use your products with that model. I don't have time.

  • BCC
    BCC Posts: 6  Freshman Member
    First Anniversary Friend Collector First Comment
    Options

    I am also becoming more and more frustrating. With all false-positives the CDR functionality to block devices when detection occurs is rendered useless.

    To make it even more frustrated, for the last few days we are facing multiple clients with DNS Reputation filtering blocking SharePoint addresses.

  • itariant
    itariant Posts: 15  Freshman Member
    First Anniversary 10 Comments
    Options

    I agree with 'TheSecondComing', we can't go on with this constant bugs, firmware, false positives, security concerned and angry customers

  • NexusGR
    NexusGR Posts: 1
    First Comment
    edited May 2023
    Options

    I have the same issues with various clients (Virus:Gen.Variant.MSILHeracles.da651960 / Application.SystemInformer.2b5a37bd)
    As TheSecondComing mentioned, it is extremely frustrating and time-consuming, not to mention costly.

    Constant problems with new firmwares/signatures.
    I have completely disabled automatic firmware updates and CDR everywhere now.
    I am giving up on features that may have theoretical benefits but only cause problems in practice. I have clients who are already considering switching to another manufacturer because it's so annoying.

  • TheSecondComing
    Options

    And yet here we are again on another one. Hello??

    Virus infected SSI:N Type:Anti-Malware Signature Virus:Gen.Variant.Zusy.ce59f0e9 File:windows-kb890830-v5.113_4882065cf19b9df1c0e0e29faeea6fdfded9218 Protocol:HTTP

  • LucaPapaleo
    LucaPapaleo Posts: 12  Freshman Member
    First Anniversary 10 Comments
    Options

    Yes for me the same

    Again a lot of false positive…

    Please really fix it, now!

    Luca

Security Highlight