[SOLVED] [04458004] False Positive Detection on the URLs

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users.
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

[SOLVED] [04458004] False Positive Detection on the URLs

Post by Abhi_virus »

Dear Team,

We have seen detection on the following URL

http://inclk.com
http://clkads.com
http://clkrev.com


They are incorrectly being categorised as "Phishing and Fraud". Can you please fix this ASAp.

Please do let me know if you need any other details.

Thanks
Abhishek
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus »

Dear Team,

Please do let me know if you need any additional details for this reported issue.

Can you please share your inputs on this.
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster »

I have checked the URLs and they are categorized as Advertisements & Pop-Ups at Cyren (one of our engines), but not as Phishing and Fraud
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus »

Hi,

Thanks for your feedback.

please refer the attached screenshot , where panda is categorising it as Phishing & Fraud.
Attachments
Screenshot
Screenshot
Panda Global Protection 2016.jpg (88.67 KiB) Viewed 8000 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster »

According to that report it was on December 1st
Are they being detected now?
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus »

The detection is still there. Please refer the attached screenshot taken on 26th december 2016.
Attachments
screenshot
screenshot
Panda.png (298.95 KiB) Viewed 7978 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster »

Make sure that the protection gets syncronized before accessing it again
You should see a line in the report stating that

Can you post a copy of the antivirus report so that we can check the full URLs
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Abhi_virus
Registered user
Registered user
Posts: 23
Joined: Wed, 24 Jun 2015, 13:13

Re: False Positive Detection on the URLs

Post by Abhi_virus »

Sure.

Please find the log file as attachment for the three URLs.
Attachments
Log.zip
Log File
(1.9 KiB) Downloaded 255 times
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: False Positive Detection on the URLs

Post by VirusBuster »

Although the main domains are classified as Advertisements & Pop-Ups, anything under banners is classified as Phishing and Fraud
http://inclk.com/adServe/banners
http://clkads.com/adServe/banners
http://clkrev.com/adServe/banners

We have created the case 04458004 for this issue
We'll keep you updated
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
User avatar
VirusBuster
Official moderator
Official moderator
Posts: 7595
Joined: Mon, 02 Apr 2012, 18:53
Location: Panda HQ - Bilbao

Re: [04458004] False Positive Detection on the URLs

Post by VirusBuster »

They won't be detected with the next signature update/syncronization
Regards,

Image
Jorge Torre
TechSupport Department - Panda Security

I don't reply to private messages unless I have previously requested them
Locked

Return to “Virus - Archive Issues”