for these 2 files the auto result says malware. the adv. heur. must have been still analyzing
Good point. I should have mentioned that I was mainly looking at whether the auto-result disagreed. I probably should also be looking at the auto-result as well, but I had so many samples that I figured it was best to just give it to them and let them examine the file itself.
Now that you point it out I suppose I should probably limit myself to only those that differ with the official auto verdict. I will do that from now on.
Thanks.