Posted Yesterday, 12:06 PM
The consensus among most experts is that if 90% of the results of an online file analysis (VirusTotal, Jotti's virusscan, VirSCAN, Hybrid-Analysis, etc) indicate a file submission is clean, then you can disregard the other detection(s) as a false positive...especially if the detection is more generic, suspicious, potentially unwanted programs (PUPs) and/or was made by any of the lesser known security vendors. This is typically due to the security program's heuristic analysis engine which provides the ability to detect possible new variants of malware.
Submitting file samples to the anti-virus vendor which made the detection for further analysis allows the lab Techs to quickly investigate and confirm if the detection is actually malware. Some security programs have built-in options for submitting a file directly from the quarantined area to the vendor's lab for analysis. Most user guides will explain how to do that. Other anti-virus solutions automatically submit files or provide an alert to do so if you have checked the option to "Submit for analysis in the program's settings. If those options are unavailable, most anti-virus vendors have instructions for sample file submissions posted on their web sites. You should also contact and advise the program vendor that one of their files is being detected as a threat. In many cases they will work with the anti-virus labs in an attempt to resolve the detection.