Results 1 to 6 of 6

Thread: [SOLVED] Trojan-Banker.Win32.ChePro.fsy - False Positive

  1. #1
    Join Date
    Jun 2013
    Posts
    7

    Default [SOLVED] Trojan-Banker.Win32.ChePro.fsy - False Positive

    Today I got pop-up saying that zonealarm detected Trojan-Banker.Win32.ChePro.fsy in C:\Users\USERNAME\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_ x86\widevinecdm.dll

    Is this false positive, because it seems that this is legit google chrome file.

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Trojan-Banker.Win32.ChePro.fsy - False Positive?

    As already indicated to you in previous threads, you need to contact kaspersky, we can't from here. Instructions:
    How to diagnose and/or report antivirus/antispyware false positives

    Thanks,
    Fax
    Last edited by fax; December 17th, 2013 at 07:24 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    Join Date
    Jun 2013
    Posts
    7

    Default Re: Trojan-Banker.Win32.ChePro.fsy - False Positive?

    I scanned this file via virustotal.com, and it was detected only with kaspersky scanner as Trojan-Banker.Win32.ChePro.fsy, I will send email to kaspersky with this file included. screenshot1.jpg screenshot2.jpg
    Last edited by almirsahbaz; December 17th, 2013 at 10:45 AM.

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Trojan-Banker.Win32.ChePro.fsy - False Positive?

    Yeap, looks like a FP. Thanks!
    Next time follow directly the procedure, no need to post it here. On top, you save one step.
    Last edited by fax; December 17th, 2013 at 08:23 AM.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    Join Date
    Jun 2013
    Posts
    7

    Default Re: Trojan-Banker.Win32.ChePro.fsy - False Positive?

    Kaspersky support answered me that this was false positive and that it will be fixed in next update.
    I updated zonealarm antivirus database, and this problem is now resolved with database version: 1133611808. Once again sorry for opening this thread, next time I will first check steps for detecting false positives before I open another thread.
    Last edited by almirsahbaz; December 17th, 2013 at 10:53 AM.

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,287

    Default Re: Trojan-Banker.Win32.ChePro.fsy - False Positive?

    Thank you anyway for taking the time to report it back here.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Trojan-Spy.Win32.Agent.bloy possible false positive
    By factor in forum Malware Discussion
    Replies: 7
    Last Post: November 21st, 2010, 11:04 PM
  2. [SOLVED] False-Positive for Trojan Backdoor.Win32.Rbot.amhq
    By mirra508 in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 0
    Last Post: September 14th, 2010, 05:09 AM
  3. Win32.Trojan.Spy.Banker.ju false positive?
    By itacbt in forum Malware Discussion
    Replies: 1
    Last Post: July 13th, 2009, 09:56 AM
  4. Win32.Trojan.Spy.Banker.ju. false positive?
    By itacbt in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 1
    Last Post: July 9th, 2009, 05:44 AM
  5. Possible false positive detection of Trojan-Banker.Win32.Banbra.cex
    By trainfan in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 1
    Last Post: August 17th, 2008, 10:19 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •