Solved

VIrustotal webroot detection!

  • 2 March 2017
  • 3 replies
  • 190 views

Hello!
 
Both my Husband and me play World of Warcraft in our spare time, and use addons, as a measure of security we use Virustotal before installing.
 
This time, on three well known addons we received a detection ratio of 1/55 coming from Webroot, for the same trojan.
 
 
https://www.virustotal.com/en/file/61602da50c0318023216483f4362178de41691f6e673e2acbd22f470844563a9/analysis/1488444864/
https://www.virustotal.com/en/file/a1449f3ae41d95f86e9f46f63b383db9fd2ecd0ab9c65849db15a30f9ad9168b/analysis/1488444848/
https://www.virustotal.com/en/file/3554969ee8357161acd9bf6678da16e111c365e14879c971c7913bfcd5c764cc/analysis/1488444881/
 
False positive or worrying issue ? All addons come from curse.
icon

Best answer by DanP 2 March 2017, 15:59

View original

3 replies

Userlevel 7
Badge +56
Hello and Welcome to the Webroot Community!
 
Maybe @ can look into this for you when he comes in today.
Userlevel 7
Badge +35
@ wrote:
Hello!
 
Both my Husband and me play World of Warcraft in our spare time, and use addons, as a measure of security we use Virustotal before installing.
 
This time, on three well known addons we received a detection ratio of 1/55 coming from Webroot, for the same trojan.
 
 
https://www.virustotal.com/en/file/61602da50c0318023216483f4362178de41691f6e673e2acbd22f470844563a9/analysis/1488444864/
https://www.virustotal.com/en/file/a1449f3ae41d95f86e9f46f63b383db9fd2ecd0ab9c65849db15a30f9ad9168b/analysis/1488444848/
https://www.virustotal.com/en/file/3554969ee8357161acd9bf6678da16e111c365e14879c971c7913bfcd5c764cc/analysis/1488444881/
 
False positive or worrying issue ? All addons come from curse.
Those detections are due to an issue with the Webroot VT scanner, so you can treat them as False Positives. They are not detected by Webroot SecureAnywhere. 
 
Thanks,
 
-Dan
Userlevel 7
Badge +56
@ wrote:
Those detections are due to an issue with the Webroot VT scanner, so you can treat them as False Positives. They are not detected by Webroot SecureAnywhere. 
 
Thanks,
 
-Dan
Thanks Dan I even check the MD5's with the Webroot File detection website and they were Unknown  http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx ! ;)

Reply