homepage

Virus in Wofftoolbox.exe ?

Posted By: JimBobb

Virus in Wofftoolbox.exe ? - 10/31/17 08:40 AM

Hey, virustotal shows 17 scanners reported positive

https://www.virustotal.com/#/file/10625890a819881862b02259b8e2292561e4895a9bed7bca349d7bb93d689662
Posted By: Stache

Re: Virus in Wofftoolbox.exe ? - 10/31/17 11:34 AM

And 50 other scanners on the same page reported it clean.
It is a false positive.

Please see this thread http://simhq.com/forum/ubbthreads.php/topics/4371326/woffue-anti-virus-kicks-in#Post4371326

Posted By: JimBobb

Re: Virus in Wofftoolbox.exe ? - 10/31/17 11:43 AM

Probably false positive.... but i'm paranoid about such things.... can something be done about this?

for example woff.exe only shows 1 positive.... which i'm 99% is false positive...... but 17 hits is a lot for a false positive
Posted By: Robert_Wiggins

Re: Virus in Wofftoolbox.exe ? - 10/31/17 11:51 AM

Contact your virus product support team and report your experience. I agree with the others that it is false positive. Your virus product needs to be updated by it's support team.
Posted By: Stache

Re: Virus in Wofftoolbox.exe ? - 10/31/17 12:59 PM

Originally Posted by JimBobb
Probably false positive.... but i'm paranoid about such things.... can something be done about this?

for example woff.exe only shows 1 positive.... which i'm 99% is false positive...... but 17 hits is a lot for a false positive


The answer to your question (the same as Robert posted) was in the thread I posted.
Specifically please see this post http://simhq.com/forum/ubbthreads.php/topics/4371332/re-woffue-anti-virus-kicks-in#Post4371332

By the way - Want AV are you using and what does it report?
Posted By: Polovski

Re: Virus in Wofftoolbox.exe ? - 10/31/17 05:50 PM

Again, there is no virus in WOFF.

For a start many free AVs show it as a false positive. They seem to share some common virus data rather than just working it out for themselves.

We use one of the best AV's ESET NOD32 / Smart Security and it shows no problem, as does other top, well established, Anti Virus programs such as Kaspersky, Symantec, F-Secure, Trend Micro etc. - as seen in that list. I'd go with those.

We have cleared it with several AV producers - but you have to report it as a false positive unfortunately and sometimes everytime we bring out a new one. Sorry I don't have time to discuss with 17 AV compaines and report false positives each time, many those AVs are free or new to the field and should do better.
Eventually they will get it. Toolbox false positive detection is likely because the toolbox can clear registry values (OURS) and remove software (OURS) and date stamp and hex edit software (aircraft cloning, OURS!) You get the idea.


If you have time, please report it to your AV supplier as a false positive. They will check, and then remove the false positive.
Please if everyone can do this it will help us.
© 2024 SimHQ Forums