Use of ftp://ftp.drivehq.com/ giving false positive.

Swaino

So i'm building a FTP client in .net and I have a link label that when clicked shows a message box, it just gives the user an example of what an FTP server address is. The exact code is;

Private Sub LinkLabel1_LinkClicked(ByVal sender As System.Object, ByVal e As System.Windows.Forms.LinkLabelLinkClickedEventArgs) Handles LinkLabel1.LinkClicked
        MsgBox("A typical example of real life FTP server address would be ftp://ftp.drivehq.com/. What ever host you use, the server address should always start with ftp:// and should always end with a /. If either of these two factors are not included, your login may be unsuccesfull.")
    End Sub

After building and scanning the result I got was https://www.virustotal.com/file/b512851ac68e50d3af95c0f7bb6c1528bdd2b038fe7138a964576155370b7492/analysis/1337135131/

Only after testing did i find out that the use of ftp://ftp.drivehq.com/was what was giving out the false positive.

Simple replacing it with ftp://ftp.example.com/ got rid of any detections https://www.virustotal.com/file/c9b1ec59294da67347cb7bfc3f1a1eb32f66990725be6cd0cee2bab641031a5e/analysis/

This is a silly silly detection. Simply for using a certain word (drivehq) my program was detected.

2eemeli

Hi,

 

you can submit the file and get the false positive removed.

 

Go here

[Deleted User]

Hi Swaino,

 

Can you submit that file to our Sample Analysis System?

https://analysis.f-secure.com/portal/login.html

warriorfullight

Got it. Thanks for sharing this link, Mate. I will also try to check the other link and see what works best.