PDA

View Full Version : Red flags



custer
14-02-2020, 04:52 PM
Why is this getting flagged as suspicious?
<b>You have to register to ba able to see this link</b>

Edit: Forgot to add report link.
<b>You have to register to ba able to see this link</b>

Tiger
14-02-2020, 06:10 PM
Multiple aliases (even if they are clean - we don't do a deep analysis on cfgs). Please upload us that config file so we can whitelist it and remove your detection.

custer
14-02-2020, 06:22 PM
<b>You have to register to ba able to see this link</b>!ynAUHAqJ!g_Ci8ZBuGZXCkWowht-8mbcuS478OFQJ93313SXdFtM

It was first detected in 2019, i didn't bother posting it here but it annoys people when they see red flags because of that simple script. Script was same, but in different file. I moved it from autoexec.cfg to config.cfg later.

Tiger
14-02-2020, 08:57 PM
Uploaded file has different hash... upload us the original file.

custer
15-02-2020, 01:43 AM
<b>You have to register to ba able to see this link</b>[...]

As i said, aliases have been moved from autoexec.cfg to config.cfg file. You can see that in older detections.

Tiger
15-02-2020, 02:33 PM
You have to give me autoexec.cfg if you want this cfg to be whitelisted and your detection removed.

For this config.cfg, your detection has been cleared and this file has been whitelisted.

custer
15-02-2020, 02:43 PM
I don't have autoexec.cfg file anymore and i don't know how to recover it. I removed it long time ago and the only text i moved from it was those aliases that have been flagged, nothing else.

Edit: Also i moved some setinfo text because i had passwords stored there.