I think it should have a way to submit unknown files from KillSwitch for analysis.
I can search the web but I can’t submit them for analysis :embarassed:
By the way, they come and go… The same file (same MD5) is reported as clean and then, suddenly, goes back to the unknown state
I’ve reported them a lot of times in the false positive thread, but they come back as suspicious…
Also it would be nice to see an option to send more info about the false positives.
Right now, on CCE, you can only submit the file and you can’t send comments that would be useful I suppose: virus total links, links for download the file, name of the manufacturer, version of the product or anything else that could help the virus lab guys.