[SOLVED] False positives on Lavasoft's Web Companion (1 of 2)

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users.
Locked
LSAndy
Registered user
Registered user
Posts: 4
Joined: Thu, 10 Sep 2015, 10:11

[SOLVED] False positives on Lavasoft's Web Companion (1 of 2)

Post by LSAndy »

Hi Panda,

The attached files are from several different builds of Lavasoft's Web Companion application. Can I ask you to review them please? Thanks.

Andy Browne
Director, Malware Lab
Lavasoft, makers of Ad-Aware
LavasoftTcpService.exe.e20f60c4ef1df6b07003216c41c32b5f.zip
Detected as Trj/CI.A
(770.33 KiB) Downloaded 275 times
LavasoftTcpService.dll.0629218cac267da8ba22c1dd9ac1342f.zip
Detected as Trj/CI.A
(257.49 KiB) Downloaded 264 times
LavasoftTcpService.dll.769beec53b7897779e1a9873f4191100.zip
Detected as Generic Suspicious
(262.08 KiB) Downloaded 282 times
LSAndy
Registered user
Registered user
Posts: 4
Joined: Thu, 10 Sep 2015, 10:11

False positives on Lavasoft's Web Companion (2 of 2)

Post by LSAndy »

Hi Panda,

The attached file is from a build of Lavasoft's Web Companion application. Can I ask you to review it please? Thanks.

Andy Browne
Director, Malware Lab
Lavasoft, makers of Ad-Aware
LavasoftTcpServiceCert.dll.e4ee6ec8b70ae67f903c8ad76eb2fe36.zip
Detected as Generic Suspicious
(134.35 KiB) Downloaded 297 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by VirusBuster »

We have sent the files to our laboratory for being studied
We'll keep you updated
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by VirusBuster »

These files won't be detected again with the next signature update/syncronization
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
LSAndy
Registered user
Registered user
Posts: 4
Joined: Thu, 10 Sep 2015, 10:11

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by LSAndy »

Thanks for the info, VirusBuster.

Is there are service at Panda where vendors can upload their products so they can be whitelisted? If so, can you put me in touch with the relevant team at Panda?

I'm using a gmail address on this forum, but PM me and I can send you my Lavasoft email address.

Andy

Andy Browne
Director, Malware Lab
Lavasoft, makers of Ad-Aware
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by VirusBuster »

While we establish a better system for whitelisting you can contact a forum moderator or local support team and we can create a folder in our FTP for you to upload the software

This time we've only excluded the provided files from being detected, but it will be better if you provide us the full software so that we can include your digital signature to our trusted signatures container and make sure that future version won't be detected

I'll PM you the FTP details
Let us know when its uploaded so that we can process the whitelisting
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
LSAndy
Registered user
Registered user
Posts: 4
Joined: Thu, 10 Sep 2015, 10:11

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by LSAndy »

The plan is to automate the upload of new builds, rather than uploading just one version. Is this ok?
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positives on Lavasoft's Web Companion (1 of 2)

Post by VirusBuster »

Yes, that's the idea. Anyway, if the files are digitally signed the whitelisting will also apply for future versions as long as the signature doesn't change
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Locked

Return to “Virus - Archive Issues”