Subj : Netfoss
To   : MATT MUNSON
From : Mike Ehlert
Date : Sun May 08 2016 09:20 pm

* In a cyberspace transmission to All, MATT MUNSON said:

 mm> It seems Windows Defender is deleting the newest version of
 mm> Netfoss, is it
 mm> the hercurtics engine that is pissing it off?

I suspect it is deleting Net2BBS and not NetFoss, at least that's
what a few other anti virus programs were doing that use
"Heuristic analysis", such as Avast and F-Prot. I submitted a
false-positive report to Avast the day I released version 1.14
and they promply responded and informed me they had updated their
database to prevent it from being flagged in the future. However
F-Prot's web site has a broken AV False Positive submission form,
and no matter which browser I tried, the submission failed.

I was unaware that Windows Defender uses Heuristic Analysis as
well. This basicly means that it will generate false positives
when programs appear suspisious such as a telnet server that allows
incoming tcp connections. Many also consider very small files such
as software written in assembler to be suspicious, just because
it's the prefered language of hackers and virus writers wanting
a small payload.

If you have doubts about such a file the best thing to do is
upload it to a multi-AV online scanning site such as Virus
Total, and see if the higher quality AV programs such as
Kaspersky, AVG, Symantec, and even Clam AV will mark it as
a threat.

Regards,  Mike

 
* Origin:  (1:3634/12)

.