PSB to remotely submit suspected false virus alert samples to the F-Secure lab
Please implement the capability in FSAV PSB to remotely submit suspected false virus alert samples to the F-Secure lab!
I see a LOT of obvious-looking false alarms among hungarian schools using monthly subscriptions of PSB Advanced. Apparently it affects in-house bred and specifically hungarian software titles, but I don't have access to binary samples, because obtaining co-operation from the end users via mail and phone is difficult! On the other hand, the FSC lab answers they cannot deliver a definite judgement without the binaries.
I would like to have a button in our PSB SoP account, where I can tick a virus alert item and click "Submit object for second opinion" and the affected endpoint would just do the upload and the Lab's answer would arrive at the e-mail address beloning to the particular SoP login. Sounds so easy, why not implement it?
False alarm handling is the weak point of almost all anti-virus software brands, as the vendors like to pretend such problem doesn't exist. But I feel it is key to the usability of PSB especially, where the cloud-managed endpoints can be anywhere geographically , so traditional methods of fetching samples via USB and so on are not practicable.
Currently the situation is, school people experiencing the false alarm are trying to re-download / re-run the file obsessively-complusively for a dozen times, then get fed up with lack of success and turn off or uninstall PSB and I can only obseve that outcome via the webportal. Hungarian people are not very communicative and usually don't ask for help or don't even accept it. The ability to fix false alarms silently via tele-operation that would be tremendously helpful!
Thanks for your kind attention, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Hungary.