https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825509#M18293 <P>The screenshot you supplied says it is malware ...</P> Tue, 12 Jan 2016 10:24:42 GMT Philip D'Ath 2016-01-12T10:24:42Z https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825508#M18292 <P>Hi</P> <P></P> <P>I'm working with a costumers Sourcefire and ran into this file being blocked by the system.</P> <P>AAFlash_setup.exe</P> <P><SPAN style="font-size: 12pt; font-family: Arial, sans-serif;">https://www.virustotal.com/en/file/8e13f9c500757b2822c8c36a5ee32b820ff274e8cbbc9976f0cce096d7e7dd18/analysis/</SPAN></P> <P><SPAN style="font-size: 12pt; font-family: Arial, sans-serif;"></SPAN></P> <P>I can't seem to find any reason anywhere as to why the file is being blocked other that the Sourcefire dosn't like it.</P> <P></P> <P>So does it contain malware or is it a false positive ?</P> <P>And where do i find this infomation because my almighty google didn't help me.</P> <P></P> <P>Picture with the hit is attached</P> <P></P> <P>//Brian</P> Tue, 12 Jan 2016 09:16:28 GMT https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825508#M18292 Brian Korfitz Miehs 2016-01-12T09:16:28Z https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825509#M18293 <P>The screenshot you supplied says it is malware ...</P> Tue, 12 Jan 2016 10:24:42 GMT https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825509#M18293 Philip D'Ath 2016-01-12T10:24:42Z https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825510#M18294 <P>I can read and that is really not my problem <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> <P></P> <P>My problem is 56 other virus scanners say that this file is clean and the only Sourcefire says it's infected and dosn't show in detail with what.</P> Tue, 12 Jan 2016 10:38:05 GMT https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825510#M18294 Brian Korfitz Miehs 2016-01-12T10:38:05Z https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825511#M18295 <P>I found someone with access to threatgrid and the file was just slightly bad and with no virus.</P> Wed, 27 Jan 2016 09:12:38 GMT https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825511#M18295 Brian Korfitz Miehs 2016-01-27T09:12:38Z https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825512#M18296 <P>Then it must be a false positive.</P> Wed, 09 Mar 2016 10:58:59 GMT https://community.cisco.com/t5/network-security/false-positive-hit-or-not-solved/m-p/2825512#M18296 Dennis Perto 2016-03-09T10:58:59Z