Jump to content


Photo

Cacaoweb False Positive - Trojan.Agent

cacaoweb false positive trojan

  • Please log in to reply
5 replies to this topic

#1 Nally

Nally

    New Member

  • Members
  • Pip
  • 2 posts

Posted 15 March 2012 - 12:38 PM

Cacaoweb.exe is being identified falsely as trojan.agent file.
I scanned the file online with virusscan.jotty.org here's the link to the results: http://virusscan.jot...b9bc244ae60ff9e

Here is the webpage of this app: http://cacaoweb.org/

Attached Files



#2 David H. Lipman

David H. Lipman

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 4,246 posts
  • Gender:Male
  • Location:Jersey Shore USA
  • Interests:Malware Research, dSLR Photography, Numismatics & Surf Fishing

Posted 15 March 2012 - 12:46 PM

READ BEFORE REPORTING A FALSE POSITIVE!


Please ZIP the EXE file and attach the ZIP file that was deemed to be a "trojan.agent".
David H. Lipman
DLipman@Verizon.Net

#3 Fatdcuk

Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 20,543 posts
  • Gender:Male
  • Location:127.0.0.1

Posted 15 March 2012 - 06:40 PM

Thankyou Nally for your report.

This is a confirmed false positive and will be fixed in the next database update.
Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4 Nally

Nally

    New Member

  • Members
  • Pip
  • 2 posts

Posted 15 March 2012 - 06:55 PM

Thank you David and Fatdcuk for your fast responses and especially to Fatdcuk for confirming that the next update will fix this issue.

#5 sebastien4567

sebastien4567

    New Member

  • Members
  • Pip
  • 1 posts

Posted 07 December 2012 - 09:59 AM

cacaoweb is still detected as "trojan.agent", it doesn't seem like you fixed anything.
Antimalware is the only security software having this false positive issue: https://www.virustot...sis/1354891875/

This app is in the top 20 of softonic, this is not very professional and annoying for your users!

Attached Files



#6 Fatdcuk

Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 20,543 posts
  • Gender:Male
  • Location:127.0.0.1

Posted 07 December 2012 - 10:05 AM

Hi sebastien4567,

Confirmed this is a F/P but it by a signature added recently(not the same one that F/p'ed back then).

Thankyou for reporting this will be fixed on the next update cycle.
Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users