[SOLVED] [04458004] False Positive Detection on the URLs

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users.
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

[SOLVED] [04458004] False Positive Detection on the URLs

Post by Abhi_virus » Mon, 19 Dec 2016, 13:20

Dear Team,

We have seen detection on the following URL

http://inclk.com
http://clkads.com
http://clkrev.com


They are incorrectly being categorised as "Phishing and Fraud". Can you please fix this ASAp.

Please do let me know if you need any other details.

Thanks
Abhishek

Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus » Thu, 22 Dec 2016, 08:02

Dear Team,

Please do let me know if you need any additional details for this reported issue.

Can you please share your inputs on this.

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster » Mon, 26 Dec 2016, 15:35

I have checked the URLs and they are categorized as Advertisements & Pop-Ups at Cyren (one of our engines), but not as Phishing and Fraud
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus » Mon, 26 Dec 2016, 15:44

Hi,

Thanks for your feedback.

please refer the attached screenshot , where panda is categorising it as Phishing & Fraud.
Attachments
Panda Global Protection 2016.jpg
Screenshot
Panda Global Protection 2016.jpg (88.67 KiB) Viewed 4446 times

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster » Mon, 26 Dec 2016, 16:00

According to that report it was on December 1st
Are they being detected now?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus » Mon, 26 Dec 2016, 17:30

The detection is still there. Please refer the attached screenshot taken on 26th december 2016.
Attachments
Panda.png
screenshot
Panda.png (298.95 KiB) Viewed 4424 times

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster » Mon, 26 Dec 2016, 17:55

Make sure that the protection gets syncronized before accessing it again
You should see a line in the report stating that

Can you post a copy of the antivirus report so that we can check the full URLs
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus » Tue, 27 Dec 2016, 11:19

Sure.

Please find the log file as attachment for the three URLs.
Attachments
Log.zip
Log File
(1.9 KiB) Downloaded 154 times

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster » Tue, 27 Dec 2016, 13:54

Although the main domains are classified as Advertisements & Pop-Ups, anything under banners is classified as Phishing and Fraud
http://inclk.com/adServe/banners
http://clkads.com/adServe/banners
http://clkrev.com/adServe/banners

We have created the case 04458004 for this issue
We'll keep you updated
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7596
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: [04458004] False Positive Detection on the URLs

Post by VirusBuster » Tue, 27 Dec 2016, 18:01

They won't be detected with the next signature update/syncronization
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them

Locked

Return to “Virus - Archive Issues”