# False positive flag

**URL:** <https://discuss.elastic.co/t/false-positive-flag/230143>\
**Category:** Endpoint Security\
**Created:** [April 28, 2020, 11:02am UTC](https://discuss.elastic.co/t/false-positive-flag/230143 "2020-04-28T11:02:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Diana](https://avatars.discourse-cdn.com/v4/letter/d/bc8723/32.png) [@Diana](https://discuss.elastic.co/u/Diana)\
**Post date:** [April 28, 2020, 11:02am UTC](https://discuss.elastic.co/t/false-positive-flag/230143/1 "2020-04-28T11:02:10Z")

</div>

Hello. We respectfully ask the removal of the false positive on our product DriverFinder.  
It’s currently tagged as “Malicious (moderate Confidence)”

We've sent emails to [info@endgame.com](mailto:info@endgame.com) but didn't get any response, hence this post here.

Kindly note that DriverFinder is not bundled with any software, and does not offer any ads within the program. We have also undergone rigorous software industry certification and we’re currently Norton-whitelisted, and Appesteem-certified. Site is also a McAfee SECURE site.

As such, we respectfully ask that the detection be removed.

Site: [https://driverfinderpro.com/](https://driverfinderpro.com/)  
EULA: [https://driverfinderpro.com/eula.php](https://driverfinderpro.com/eula.php)  
Privacy Policy: [https://driverfinderpro.com/privacy.php](https://driverfinderpro.com/privacy.php)

Thank you and kind regards,  
Diana McCord

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [April 28, 2020, 7:38pm UTC](https://discuss.elastic.co/t/false-positive-flag/230143/2 "2020-04-28T19:38:50Z")

</div>

Hi Diana - You should see an update to our engine which marks this benign within a couple weeks.

Thanks

Mark

---

<div class="post-metadata">

**Author:** ![Diana](https://avatars.discourse-cdn.com/v4/letter/d/bc8723/32.png) [@Diana](https://discuss.elastic.co/u/Diana)\
**Post date:** [April 29, 2020, 11:35am UTC](https://discuss.elastic.co/t/false-positive-flag/230143/3 "2020-04-29T11:35:00Z")

</div>

Hello Mark - thank you!  
We'll keep an eye out for the update. Appreciate this.

Kind regards,  
Diana McCord

---

<div class="post-metadata">

**Author:** ![Diana](https://avatars.discourse-cdn.com/v4/letter/d/bc8723/32.png) [@Diana](https://discuss.elastic.co/u/Diana)\
**Post date:** [May 25, 2020, 11:45am UTC](https://discuss.elastic.co/t/false-positive-flag/230143/4 "2020-05-25T11:45:54Z")

</div>

Hello Mark - just wanted to follow up on this as I still see us being flagged on VT.

Thanks!  
Diana

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [May 26, 2020, 6:57pm UTC](https://discuss.elastic.co/t/false-positive-flag/230143/5 "2020-05-26T18:57:14Z")

</div>

Thanks Diana, I looked into it and may have found a bug in a piece of the generation code which is causing that malicious label to stick around. Thanks for being patient as we work through it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 23, 2020, 6:57pm UTC](https://discuss.elastic.co/t/false-positive-flag/230143/6 "2020-06-23T18:57:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.