Telerik.Windows.Documents.Core.dll Detected as Virus By Comodo

7 posts, 0 answers
  1. Kyle
    Kyle avatar
    16 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 Link to this post

    Telerik Support,

    Just wanted to give a heads-up, was having an interesting problem with a client where our app wouldn't start up, eventually learned it was because Telerik.Windows.Documents.Core.dll was identified as a trojan by their Comodo One client and quarantined.  Attached is a report of us adding the file to the exclusion list.

    Thanks,

    Kyle

  2. Kyle
    Kyle avatar
    16 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 in reply to Kyle Link to this post

    Sorry, forgot to mention we're on v2016.2.421.40 of Telerik Controls for WPF.
  3. Tanya
    Admin
    Tanya avatar
    469 posts

    Posted 16 Aug 2016 Link to this post

    Hi Kyle,

    We are not aware why the antivirus software is detecting the dll as a trojan, but I can assure you that our files are scanned quite often and we haven't detected any malware. It is possible that a file is considered as a thread because it is downloaded from the internet or it interacts with the file system.

    I believe that adding the file to the exception rules of the antivirus will be a safe approach to move forward.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  4. Tanya
    Admin
    Tanya avatar
    469 posts

    Posted 19 Aug 2016 Link to this post

    Hello Kyle,

    I'm writing to let you know that we contacted Comodo to check why our assembly is detected as a malware and they confirmed it is not harmful. The false positive alarm is now fixed and you shouldn't experience similar issues if you upgrade the Comodo antivirus database to version <25641> or later.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  5. Kyle
    Kyle avatar
    16 posts
    Member since:
    Jan 2011

    Posted 19 Aug 2016 in reply to Tanya Link to this post

    Awesome!  Thank you so much, didn't expect any action on your (Telerik's) part as obviously it's Comodo's problem and not yours, very appreciative!
  6. Phil
    Phil avatar
    1 posts
    Member since:
    Jan 2017

    Posted 18 Jan in reply to Kyle Link to this post

    I believe that this false positive problem is ongoing because today (January 18, 2017) I installed COMODO Internet Security Premium 10 (version 10.0.0.6092) with the latest virus signature files.   Very shortly after installation it quarantined the Telerik.Windows.Documents.Core.dll file which is included with our corporate phone system software.  COMODO Internet Security Premium 10 thinks (incorrectly) that the file contains malware "Backdoor.Win32.NetWiredRC.DS.@346199067"

    FYI the version of Telerik.Windows.Documents.Core.dll we are using is 2015.1.0401.40

    It's not hard to go to the Quarantine and also add the file to the "excluded files" list but it would be better if the program did not do a false positive on this file in the first place.

     

    I submitted the Telerik.Windows.Documents.Core.dll file as a false positive.

  7. Tanya
    Admin
    Tanya avatar
    469 posts

    Posted 20 Jan Link to this post

    Hello Phil,

    Thank you for reporting this and for sending the report to Comodo.

    Since it was confirmed on their side that the alarm is false positive, I am afraid that the only thing we can do is to send reports to the team supporting the antivirus and there is not much we can do on our side to avoid putting the assembly under quarantine.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
Back to Top