Wednesday, April 16, 2008

Wednesday, April 16, 2008T4/16/2008 01:08:00 PM
         
 

SIW, Sophos and Mal/Emogen-R

Today I got a lot of emails with a similar content:
This morning, Sophos Anti-Virus quarantined SIW, with the message "File '...\siw.exe' belongs to virus/spyware Mal/Emogen-R."
I’ve contacted Sophos support and I got the following reply:
Gabriel, What you would want to do is send an email to our virus labs so that they can review the site and/or files that you wish to send along to confirm if there is a real threat or if something is getting triggered as a false positive. You can send that information to samples@sophos.com (not a reply to this email). Once they have your request they will review it and get back to you with the results. Regards, William Drapeau Sophos Technical Support US Support: +1 888 SOPHOS 9 Web: www.sophos.com Sophos - security and control
I've sent the SIW.EXE program to samples@sophos.com; I'm waiting for a reply.

1 comment:

Anonymous said...

This false positive has been fixed.
Regards,

William Drapeau
Sophos Technical Support

--Original Message--
Date: 4/17/2008 3:08:39 AM
To: samples@sophos.com
Subject: FW: Support query submitted from www.sophos.com: Sophos Anti-Virus for Windows 2000/XP/2003 [#849255]