Skip to main content
Customer Support Customer Support
Solved

VIrustotal webroot detection!

  • March 2, 2017
  • 3 replies
  • 200 views
A
Hello!
 
Both my Husband and me play World of Warcraft in our spare time, and use addons, as a measure of security we use Virustotal before installing.
 
This time, on three well known addons we received a detection ratio of 1/55 coming from Webroot, for the same trojan.
 
 
https://www.virustotal.com/en/file/61602da50c0318023216483f4362178de41691f6e673e2acbd22f470844563a9/analysis/1488444864/
https://www.virustotal.com/en/file/a1449f3ae41d95f86e9f46f63b383db9fd2ecd0ab9c65849db15a30f9ad9168b/analysis/1488444848/
https://www.virustotal.com/en/file/3554969ee8357161acd9bf6678da16e111c365e14879c971c7913bfcd5c764cc/analysis/1488444881/
 
False positive or worrying issue ? All addons come from curse.

Best answer by DanP

@ wrote:
Hello!
 
Both my Husband and me play World of Warcraft in our spare time, and use addons, as a measure of security we use Virustotal before installing.
 
This time, on three well known addons we received a detection ratio of 1/55 coming from Webroot, for the same trojan.
 
 
https://www.virustotal.com/en/file/61602da50c0318023216483f4362178de41691f6e673e2acbd22f470844563a9/analysis/1488444864/
https://www.virustotal.com/en/file/a1449f3ae41d95f86e9f46f63b383db9fd2ecd0ab9c65849db15a30f9ad9168b/analysis/1488444848/
https://www.virustotal.com/en/file/3554969ee8357161acd9bf6678da16e111c365e14879c971c7913bfcd5c764cc/analysis/1488444881/
 
False positive or worrying issue ? All addons come from curse.
Those detections are due to an issue with the Webroot VT scanner, so you can treat them as False Positives. They are not detected by Webroot SecureAnywhere. 
 
Thanks,
 
-Dan

3 replies

RetiredTripleHelix
Gold VIP
Forum|alt.badge.img+56
Hello and Welcome to the Webroot Community!
 
Maybe @ can look into this for you when he comes in today.
    DanP
    Forum|alt.badge.img+35
    • DanPOpenText Employee
    • OpenText Employee
    • Answer
    • March 2, 2017
    @ wrote:
    Hello!
     
    Both my Husband and me play World of Warcraft in our spare time, and use addons, as a measure of security we use Virustotal before installing.
     
    This time, on three well known addons we received a detection ratio of 1/55 coming from Webroot, for the same trojan.
     
     
    https://www.virustotal.com/en/file/61602da50c0318023216483f4362178de41691f6e673e2acbd22f470844563a9/analysis/1488444864/
    https://www.virustotal.com/en/file/a1449f3ae41d95f86e9f46f63b383db9fd2ecd0ab9c65849db15a30f9ad9168b/analysis/1488444848/
    https://www.virustotal.com/en/file/3554969ee8357161acd9bf6678da16e111c365e14879c971c7913bfcd5c764cc/analysis/1488444881/
     
    False positive or worrying issue ? All addons come from curse.
    Those detections are due to an issue with the Webroot VT scanner, so you can treat them as False Positives. They are not detected by Webroot SecureAnywhere. 
     
    Thanks,
     
    -Dan
    Webroot Threat Research
      RetiredTripleHelix
      Gold VIP
      Forum|alt.badge.img+56
      @ wrote:
      Those detections are due to an issue with the Webroot VT scanner, so you can treat them as False Positives. They are not detected by Webroot SecureAnywhere. 
       
      Thanks,
       
      -Dan
      Thanks Dan I even check the MD5's with the Webroot File detection website and they were Unknown  http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx ! ;)
        Terms & ConditionsAccessibility statement