Re: Editing virus definition file

The file name is dvdscript.dll used in a 123dvd copy software. It
worked fine until I downloaded an virus def update.

On Sat, 28 Apr 2007 03:47:31 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

From: "mstrspy" <blank@xxxxxxxxxxx>

| Symantic Antivurus has succeeded in screwing up one of my programs. It
| quarantines a .dll file that I know is not a virus. How do I edit the
| file out of the definition list?
| Maybe i should switch to another anti virus program? I'm not
| impressed with Norton thses days. Live update no longer works.
| M

You don't and you can't.

You need to send them and email with teh file attached and fully state why YOU think it was
a False Positive declaration.

Unforunately, you haven't provided any details as to what is the fully qualified name and
path to the file deemed infector or what Symantec declared the file to be infected with.

You can use the following email URL.
mailto:avsubmit@xxxxxxxxxxxx?subject=False%20Positive

Attach the qurantined file in a password protected ZIP file with the password being;
infected
{password = infected }

In the body of the email fully state you case, with whatever proof you have, why you feel
the attached file was false declared.
{ Infected with what I don't know because you left that out of your post }

.

Relevant Pages

  • Re: Editing virus definition file
    ... | Symantic Antivurus has succeeded in screwing up one of my programs. ... | quarantines a .dll file that I know is not a virus. ... a False Positive declaration. ... path to the file deemed infector or what Symantec declared the file to be infected with. ...
    (alt.comp.anti-virus)
  • Re: Yet another way to obtain a virus. New virus disguised as PayPal e-mail
    ... there is nothing new about this kind of Human Engineering technique. ... While it doesn't state how the virus is propagated, ... It is a new variant of a relatively new infector, but its techniques are hardly new. ... | Mail Delivery Status Notification. ...
    (microsoft.public.security.virus)
  • Re: Polip.A
    ... There may be other infected computers on the network that ensures that all of the computers are being infected. ... From the very nature of the polymorphism, many AV's purposefully choose not to add polip to their detection, because to emulate the file and fully scan it would consume too much time. ... | recognize a virus called W32.Polip.A. ... I also know that there are instances of False Positive declarations of this infector. ...
    (microsoft.public.security.virus)
  • Re: Trojan horse Downloader.Generic.ML
    ... >> is the now extinct Ripper boot virus. ... I have no interest in general purpose integrity checkers, ... An overwriting infector in researchers' terminology, ...
    (comp.security.firewalls)
  • Re: Trojan horse Downloader.Generic.ML
    ... >> is the now extinct Ripper boot virus. ... I have no interest in general purpose integrity checkers, ... An overwriting infector in researchers' terminology, ...
    (alt.computer.security)