[SOLVED] [04432469] False positive report

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users.
Locked
mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

[SOLVED] [04432469] False positive report

Post by mirkpul »

Hi,

we have an application "exe" for the screensharing used in our platform to enable screen sharing feature. We've been reported as malware from Panda free antivirus as you can see in the attachment (italian). How to recover?

Mirko
Attachments
Panda free alert
Panda free alert
panda.png (57.84 KiB) Viewed 6706 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster »

You can restore it from the product's quarantine
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul »

Thanks for the quick reply but I want not to happen this again to another customer of mine. How can I do this?

Mirko
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster »

Can you please provide a password compressed copy of the wrongly detected file?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul »

Here it is, password is "password123":

https://drive.google.com/open?id=0B0b73 ... nptY2libWs
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster »

I have scanned the installer and all the files it installs and none of them is being detected
Can you provide a copy of the antivirus report?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
mirkpul
Registered user
Registered user
Posts: 4
Joined: Mon, 24 Oct 2016, 10:50

Re: False positive report

Post by mirkpul »

Hi there,

attached what you asked for. Some details: we're getting error once we use the plugin calling our custom custom URI scheme "wcsscreensharing".

When the browser invokes it, Panda detect the URI scheme target as malware and dropped.

The scan report:

Eventi Ulteriori dettagli Data/Ora Stato
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing 07/11/2016 09:53 Fine
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing 07/11/2016 09:53 Avviato
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Fine
Analizza Analisi: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Avviato
Virus rilevato W32/Exploit.gen Posizione: C:\Program Files (x86)\WCSScreenSharing\WCSUpdater.exe 07/11/2016 09:53 Verrà eliminato dopo aver riavviato il computer.
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 06/11/2016 12:10 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 05/11/2016 11:20 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 04/11/2016 14:25 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 03/11/2016 16:41 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 02/11/2016 16:40 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 01/11/2016 18:48 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 30/10/2016 17:57 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 29/10/2016 11:11 Sincronizzato
Sincronizzazione La protezione si è sincronizzata con il cloud contro le minacce più recenti. 28/10/2016 16:17 Sincronizzato


Let me know,

Mirko
Attachments
Error2_ita
Error2_ita
pic2.png (42.29 KiB) Viewed 6602 times
Error1_ita
Error1_ita
pic1.png (17.96 KiB) Viewed 6602 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False positive report

Post by VirusBuster »

We have created the case 04432469 for this issue
We'll keep you updated
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: [04432469] False positive report

Post by VirusBuster »

The file won't be detected again with the next signature update/synchronization
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Locked

Return to “Virus - Archive Issues”