PC Review Forums Newsgroups Microsoft AntiSpyware Security Signatures Misidentified File

Reply

Misidentified File

 
Thread Tools Rate Thread
Old 06-01-2005, 03:37 PM   #1
Jeff
Guest
 
Posts: n/a
Default Misidentified File


A .js file on my system (a file created by my company
apparently via RoboHelp based on the comments in the file)
was identified as "iMesh (Adware Bundler)" Should I
report this to someone so they can see how it was
misidentified?
  Reply With Quote
Old 06-01-2005, 04:19 PM   #2
Bill Sanderson
Guest
 
Posts: n/a
Default Re: Misidentified File

I'd say post details here--this seems a reasonable group to pick for such
issues.

If you feel there's a security issue in giving out the precise details of
the filename involved, I'm not sure what to suggest. The product has
provisions for mailing suspicious files in, but I haven't confirmed whether
those are, in fact, operational in this beta. I've used them and the
buttons seem to function, but it happens very fast, and I don't get any
dialog or confirmation of the send. And, those buttons are for reporting
possible malicious stuff, not for reporting false positives, as far as I can
see.

I hope Microsoft will clarify this reporting issue because I've seen enough
reports of similar items that I think there will be significant feedback of
this sort from this beta--and I hope they can capture the knowledge.

"Jeff" <anonymous@discussions.microsoft.com> wrote in message
news:17bf01c4f405$9a83a8b0$a501280a@phx.gbl...
>A .js file on my system (a file created by my company
> apparently via RoboHelp based on the comments in the file)
> was identified as "iMesh (Adware Bundler)" Should I
> report this to someone so they can see how it was
> misidentified?



  Reply With Quote
Old 06-01-2005, 04:35 PM   #3
Jeff
Guest
 
Posts: n/a
Default Re: Misidentified File

But what details would I post other than the entire
contents of the .JS file? I'm not sure they'd like it if
I posted the entire thing here. I guess I'll wait and see
if someone knows where to send it/if they're interested.
Thanks for the reply though.

>-----Original Message-----
>I'd say post details here--this seems a reasonable group

to pick for such
>issues.
>
>If you feel there's a security issue in giving out the

precise details of
>the filename involved, I'm not sure what to suggest. The

product has
>provisions for mailing suspicious files in, but I haven't

confirmed whether
>those are, in fact, operational in this beta. I've used

them and the
>buttons seem to function, but it happens very fast, and I

don't get any
>dialog or confirmation of the send. And, those buttons

are for reporting
>possible malicious stuff, not for reporting false

positives, as far as I can
>see.
>
>I hope Microsoft will clarify this reporting issue

because I've seen enough
>reports of similar items that I think there will be

significant feedback of
>this sort from this beta--and I hope they can capture the

knowledge.
>
>"Jeff" <anonymous@discussions.microsoft.com> wrote in

message
>news:17bf01c4f405$9a83a8b0$a501280a@phx.gbl...
>>A .js file on my system (a file created by my company
>> apparently via RoboHelp based on the comments in the

file)
>> was identified as "iMesh (Adware Bundler)" Should I
>> report this to someone so they can see how it was
>> misidentified?

>
>
>.
>

  Reply With Quote
Old 06-01-2005, 05:56 PM   #4
Bill Sanderson
Guest
 
Posts: n/a
Default Re: Misidentified File

Jeff - check out my post later in this group.
There's clear information available on criteria for listing, and a form for
vendor disputes.

I think this is what you need--hope it helps!

"Jeff" <anonymous@discussions.microsoft.com> wrote in message
news:08f401c4f40d$b37e5650$a401280a@phx.gbl...
> But what details would I post other than the entire
> contents of the .JS file? I'm not sure they'd like it if
> I posted the entire thing here. I guess I'll wait and see
> if someone knows where to send it/if they're interested.
> Thanks for the reply though.
>
>>-----Original Message-----
>>I'd say post details here--this seems a reasonable group

> to pick for such
>>issues.
>>
>>If you feel there's a security issue in giving out the

> precise details of
>>the filename involved, I'm not sure what to suggest. The

> product has
>>provisions for mailing suspicious files in, but I haven't

> confirmed whether
>>those are, in fact, operational in this beta. I've used

> them and the
>>buttons seem to function, but it happens very fast, and I

> don't get any
>>dialog or confirmation of the send. And, those buttons

> are for reporting
>>possible malicious stuff, not for reporting false

> positives, as far as I can
>>see.
>>
>>I hope Microsoft will clarify this reporting issue

> because I've seen enough
>>reports of similar items that I think there will be

> significant feedback of
>>this sort from this beta--and I hope they can capture the

> knowledge.
>>
>>"Jeff" <anonymous@discussions.microsoft.com> wrote in

> message
>>news:17bf01c4f405$9a83a8b0$a501280a@phx.gbl...
>>>A .js file on my system (a file created by my company
>>> apparently via RoboHelp based on the comments in the

> file)
>>> was identified as "iMesh (Adware Bundler)" Should I
>>> report this to someone so they can see how it was
>>> misidentified?

>>
>>
>>.
>>



  Reply With Quote
Old 06-01-2005, 06:09 PM   #5
Joe Faulhaber[MSFT]
Guest
 
Posts: n/a
Default Re: Misidentified File

We've got a bug opened tracking this false positive. I
don't know when it's going to be fixed, but it was found
inside Microsoft, too.

Thanks,
Joe

>-----Original Message-----
>Jeff - check out my post later in this group.
>There's clear information available on criteria for

listing, and a form for
>vendor disputes.
>
>I think this is what you need--hope it helps!
>
>"Jeff" <anonymous@discussions.microsoft.com> wrote in

message
>news:08f401c4f40d$b37e5650$a401280a@phx.gbl...
>> But what details would I post other than the entire
>> contents of the .JS file? I'm not sure they'd like it

if
>> I posted the entire thing here. I guess I'll wait and

see
>> if someone knows where to send it/if they're

interested.
>> Thanks for the reply though.
>>
>>>-----Original Message-----
>>>I'd say post details here--this seems a reasonable

group
>> to pick for such
>>>issues.
>>>
>>>If you feel there's a security issue in giving out the

>> precise details of
>>>the filename involved, I'm not sure what to suggest.

The
>> product has
>>>provisions for mailing suspicious files in, but I

haven't
>> confirmed whether
>>>those are, in fact, operational in this beta. I've

used
>> them and the
>>>buttons seem to function, but it happens very fast,

and I
>> don't get any
>>>dialog or confirmation of the send. And, those buttons

>> are for reporting
>>>possible malicious stuff, not for reporting false

>> positives, as far as I can
>>>see.
>>>
>>>I hope Microsoft will clarify this reporting issue

>> because I've seen enough
>>>reports of similar items that I think there will be

>> significant feedback of
>>>this sort from this beta--and I hope they can capture

the
>> knowledge.
>>>
>>>"Jeff" <anonymous@discussions.microsoft.com> wrote in

>> message
>>>news:17bf01c4f405$9a83a8b0$a501280a@phx.gbl...
>>>>A .js file on my system (a file created by my company
>>>> apparently via RoboHelp based on the comments in the

>> file)
>>>> was identified as "iMesh (Adware Bundler)" Should I
>>>> report this to someone so they can see how it was
>>>> misidentified?
>>>
>>>
>>>.
>>>

>
>
>.
>

  Reply With Quote
Old 06-01-2005, 06:44 PM   #6
kizzy
Guest
 
Posts: n/a
Default Re: Misidentified File

Good, 'cause Oracle 9 client includes some .js files with
robohelp in them. "Removing" would not be advised.
>-----Original Message-----
>We've got a bug opened tracking this false positive. I
>don't know when it's going to be fixed, but it was found
>inside Microsoft, too.
>
>Thanks,
>Joe
>
>>-----Original Message-----
>>Jeff - check out my post later in this group.
>>There's clear information available on criteria for

>listing, and a form for
>>vendor disputes.
>>
>>I think this is what you need--hope it helps!
>>
>>"Jeff" <anonymous@discussions.microsoft.com> wrote in

>message
>>news:08f401c4f40d$b37e5650$a401280a@phx.gbl...
>>> But what details would I post other than the entire
>>> contents of the .JS file? I'm not sure they'd like

it
>if
>>> I posted the entire thing here. I guess I'll wait

and
>see
>>> if someone knows where to send it/if they're

>interested.
>>> Thanks for the reply though.
>>>
>>>>-----Original Message-----
>>>>I'd say post details here--this seems a reasonable

>group
>>> to pick for such
>>>>issues.
>>>>
>>>>If you feel there's a security issue in giving out the
>>> precise details of
>>>>the filename involved, I'm not sure what to suggest.

>The
>>> product has
>>>>provisions for mailing suspicious files in, but I

>haven't
>>> confirmed whether
>>>>those are, in fact, operational in this beta. I've

>used
>>> them and the
>>>>buttons seem to function, but it happens very fast,

>and I
>>> don't get any
>>>>dialog or confirmation of the send. And, those

buttons
>>> are for reporting
>>>>possible malicious stuff, not for reporting false
>>> positives, as far as I can
>>>>see.
>>>>
>>>>I hope Microsoft will clarify this reporting issue
>>> because I've seen enough
>>>>reports of similar items that I think there will be
>>> significant feedback of
>>>>this sort from this beta--and I hope they can capture

>the
>>> knowledge.
>>>>
>>>>"Jeff" <anonymous@discussions.microsoft.com> wrote in
>>> message
>>>>news:17bf01c4f405$9a83a8b0$a501280a@phx.gbl...
>>>>>A .js file on my system (a file created by my company
>>>>> apparently via RoboHelp based on the comments in the
>>> file)
>>>>> was identified as "iMesh (Adware Bundler)" Should I
>>>>> report this to someone so they can see how it was
>>>>> misidentified?
>>>>
>>>>
>>>>.
>>>>

>>
>>
>>.
>>

>.
>

  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off