False positive Remote Utilities

Customer

• June 03, 2021 16:51

Hello

 

Some Remote Utilities files are detected as:

 

 

Trojan.Generic.12415423

 

 

The files are enclosed. Remote Utilities is legitimate remote desktop software available here www.remoteutilities.com. Please, take appropriate measure to remove the detection.

 

There is no log because we didn't install your software. The data is taken from today's VirusTotal.com run/report. There are two files being detected:

 

1. http://www.remoteutilities.com/download/viewer6.0en.msi

2. The attached one.

 

Thanks.

Conrad

 

rutview.zip

0

• 

  Customer

  • June 03, 2021 16:51

  Any response from Lavasoft?

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  Hello,

   

  we are reviewing your request and checking your files for FP.

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  Thanks!

   

  We are the manufacturer of the product, by the way. Do you have any whitelisting program/initiative for software vendors?

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  
  

  Thanks!

   

  We are the manufacturer of the product, by the way. Do you have any whitelisting program/initiative for software vendors?

  
  

  I can add your site to whitelisted after experts verdict about your soft. By the way a set of antivirus vendors detect Remot Admin Tools as Riskware and not-a-virus:RemoteAdmin. Because your software can be used by an attackers and remade for using it as a Backdoor.( Sure in such case your digital signature will be broken.) So your binaries will be detected in any case.

  0
• 

  Customer

  • June 03, 2021 16:51

  Please check you application again on virustotal.com. I have such results .

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  I can add your site to whitelisted after experts verdict about your soft.

  
  

  
  Yes, having our product whitelisted will be a great boon. Thanks.

   

  
  

  By the way a set of antivirus vendors detect Remot Admin Tools as Riskware and not-a-virus:RemoteAdmin.

  
  

  
  Well, the real problem is that many users just don't care about little differences in virus classifications. Just anything thrown at them by their antivirus software is taken for granted. If they see a warning message, they think "It's a virus" (that's how human brain works, it simplifies things).

   

  
  

  Because your software can be used by an attackers and remade for using it as a Backdoor.( Sure in such case your digital signature will be broken.) So your binaries will be detected in any case.

  
  

  
  That's why we ask, is it possible to distinguish between a signed file and an unsigned one? After all, we assume that antivirus companies nowadays are capable of doing that.

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  Please check you application again on virustotal.com. I have such results .

  
  

  
  Indeed, no detection any more. Have you updated your signatures?

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  Indeed, no detection any more. Have you updated your signatures?

  
  

  I will notify you when i receive official reply about terminating of the detect for your file.

   

  That's why we ask, is it possible to distinguish between a signed file and an unsigned one?

  
  

   

  I think it was Real-time detect as the reaction for an activity of your application.

  0
• 

  Customer

  • June 03, 2021 16:51

  
  

  Ok,

  your file was removed from detection databse.

  0
• 

  Customer

  • June 03, 2021 16:51

  Awesome

  0

Please sign in to leave a comment.