https://wiki.spybot.info/index.php?title=False_positive&feed=atom&action=historyFalse positive - Revision history2024-03-29T09:27:50ZRevision history for this page on the wikiMediaWiki 1.31.0https://wiki.spybot.info/index.php?title=False_positive&diff=780&oldid=prevCCRDude: /* Counteraction */ fixed link (name) of editor2008-02-23T10:46:48Z<p><span dir="auto"><span class="autocomment">Counteraction: </span> fixed link (name) of editor</span></p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #222; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #222; text-align: center;">Revision as of 10:46, 23 February 2008</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l5" >Line 5:</td>
<td colspan="2" class="diff-lineno">Line 5:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Counteraction==</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==Counteraction==</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Scan results inside the GUI do contain IDs (starting with Spybot-S&D) that you can type into the [[IncludeEditorLite|Editor]] to identify the line that has caused the false positive. Once identified, you need to start looking at how you might refine the [[<del class="diffchange diffchange-inline">SBI Command</del>|command]] to be stricter. A common cause would be the [[Advanced file parameters|advanced file parameters]], which might not be as unique as you've intended them to be (as a simple example, using only the filesize is not a very unique argument).</div></td><td class='diff-marker'>+</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Scan results inside the GUI do contain IDs (starting with Spybot-S&D) that you can type into the [[IncludeEditorLite|Editor]] to identify the line that has caused the false positive. Once identified, you need to start looking at how you might refine the [[<ins class="diffchange diffchange-inline">OpenSBI Editor Lite</ins>|command]] to be stricter. A common cause would be the [[Advanced file parameters|advanced file parameters]], which might not be as unique as you've intended them to be (as a simple example, using only the filesize is not a very unique argument).</div></td></tr>
</table>CCRDudehttps://wiki.spybot.info/index.php?title=False_positive&diff=47&oldid=prevCCRDude: New page: False positives are scan results that flag good files as belonging to malware. ==Reasons== False positives usually happen because of ambiguous SBI Commands, e.g. missing or lax [[Adva...2008-02-16T15:15:13Z<p>New page: False positives are scan results that flag good files as belonging to malware. ==Reasons== False positives usually happen because of ambiguous <a href="/wiki/SBI_Commands" title="SBI Commands">SBI Commands</a>, e.g. missing or lax [[Adva...</p>
<p><b>New page</b></p><div>False positives are scan results that flag good files as belonging to malware.<br />
<br />
==Reasons==<br />
False positives usually happen because of ambiguous [[SBI Commands]], e.g. missing or lax [[Advanced file parameters|advanced file parameters]].<br />
<br />
==Counteraction==<br />
Scan results inside the GUI do contain IDs (starting with Spybot-S&D) that you can type into the [[IncludeEditorLite|Editor]] to identify the line that has caused the false positive. Once identified, you need to start looking at how you might refine the [[SBI Command|command]] to be stricter. A common cause would be the [[Advanced file parameters|advanced file parameters]], which might not be as unique as you've intended them to be (as a simple example, using only the filesize is not a very unique argument).</div>CCRDude