[SOLVED] [04432469] False positive report

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users.
Locked
mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

[SOLVED] [04432469] False positive report

Post by mirkpul » Mon, 24 Oct 2016, 10:54

Hi,

we have an application "exe" for the screensharing used in our platform to enable screen sharing feature. We've been reported as malware from Panda free antivirus as you can see in the attachment (italian). How to recover?

Mirko
Attachments
panda.png
Panda free alert
panda.png (57.84 KiB) Viewed 3598 times

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster » Mon, 24 Oct 2016, 12:05

You can restore it from the product's quarantine
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul » Mon, 24 Oct 2016, 17:16

Thanks for the quick reply but I want not to happen this again to another customer of mine. How can I do this?

Mirko

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster » Tue, 25 Oct 2016, 08:56

Can you please provide a password compressed copy of the wrongly detected file?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul » Tue, 25 Oct 2016, 09:06

Here it is, password is "password123":

https://drive.google.com/open?id=0B0b73 ... nptY2libWs

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster » Wed, 26 Oct 2016, 13:14

I have scanned the installer and all the files it installs and none of them is being detected
Can you provide a copy of the antivirus report?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul » Mon, 07 Nov 2016, 11:50

Hi there,

attached what you asked for. Some details: we're getting error once we use the plugin calling our custom custom URI scheme "wcsscreensharing".

When the browser invokes it, Panda detect the URI scheme target as malware and dropped.

The scan report:

Eventi Ulteriori dettagli Data/Ora Stato
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing 07/11/2016 09:53 Fine
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing 07/11/2016 09:53 Avviato
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Fine
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Avviato
Virus rilevato W32/Exploit.gen Posizione: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Verrà eliminato dopo aver riavviato il computer.
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 06/11/2016 12:10 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 05/11/2016 11:20 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 04/11/2016 14:25 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 03/11/2016 16:41 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 02/11/2016 16:40 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 01/11/2016 18:48 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 30/10/2016 17:57 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 29/10/2016 11:11 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 28/10/2016 16:17 Sincronizzato


Let me know,

Mirko
Attachments
pic2.png
Error2_ita
pic2.png (42.29 KiB) Viewed 3494 times
pic1.png
Error1_ita
pic1.png (17.96 KiB) Viewed 3494 times

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster » Tue, 08 Nov 2016, 10:13

We have created the case 04432469 for this issue
We'll keep you updated
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: [04432469] False positive report

Post by VirusBuster » Tue, 08 Nov 2016, 17:22

The file won't be detected again with the next signature update/synchronization
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

Locked

Return to “Virus - Archive Issues”