Telerik.Windows.Documents.Core.dll Detected as Virus By Comodo

15 posts, 0 answers
  1. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 Link to this post

    Telerik Support,

    Just wanted to give a heads-up, was having an interesting problem with a client where our app wouldn't start up, eventually learned it was because Telerik.Windows.Documents.Core.dll was identified as a trojan by their Comodo One client and quarantined.  Attached is a report of us adding the file to the exclusion list.

    Thanks,

    Kyle

  2. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 in reply to Kyle Link to this post

    Sorry, forgot to mention we're on v2016.2.421.40 of Telerik Controls for WPF.
  3. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 16 Aug 2016 Link to this post

    Hi Kyle,

    We are not aware why the antivirus software is detecting the dll as a trojan, but I can assure you that our files are scanned quite often and we haven't detected any malware. It is possible that a file is considered as a thread because it is downloaded from the internet or it interacts with the file system.

    I believe that adding the file to the exception rules of the antivirus will be a safe approach to move forward.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  4. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 19 Aug 2016 Link to this post

    Hello Kyle,

    I'm writing to let you know that we contacted Comodo to check why our assembly is detected as a malware and they confirmed it is not harmful. The false positive alarm is now fixed and you shouldn't experience similar issues if you upgrade the Comodo antivirus database to version <25641> or later.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  5. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 19 Aug 2016 in reply to Tanya Link to this post

    Awesome!  Thank you so much, didn't expect any action on your (Telerik's) part as obviously it's Comodo's problem and not yours, very appreciative!
  6. Phil
    Phil avatar
    1 posts
    Member since:
    Jan 2017

    Posted 18 Jan in reply to Kyle Link to this post

    I believe that this false positive problem is ongoing because today (January 18, 2017) I installed COMODO Internet Security Premium 10 (version 10.0.0.6092) with the latest virus signature files.   Very shortly after installation it quarantined the Telerik.Windows.Documents.Core.dll file which is included with our corporate phone system software.  COMODO Internet Security Premium 10 thinks (incorrectly) that the file contains malware "Backdoor.Win32.NetWiredRC.DS.@346199067"

    FYI the version of Telerik.Windows.Documents.Core.dll we are using is 2015.1.0401.40

    It's not hard to go to the Quarantine and also add the file to the "excluded files" list but it would be better if the program did not do a false positive on this file in the first place.

     

    I submitted the Telerik.Windows.Documents.Core.dll file as a false positive.

  7. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 20 Jan Link to this post

    Hello Phil,

    Thank you for reporting this and for sending the report to Comodo.

    Since it was confirmed on their side that the alarm is false positive, I am afraid that the only thing we can do is to send reports to the team supporting the antivirus and there is not much we can do on our side to avoid putting the assembly under quarantine.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  8. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 06 Apr Link to this post

    Hello,

    I can confirm that still there is a problem with false positive. Today one of our customers reported about a Comodo alert about Telerik.Windows.Documents.Core.dll. The version of Telerik package we are using is 2016.3.914.40.

     

    Could you please take an action, so that Comodo would remove this false positive alert. We are hitting a reputation decrease when our customers see the alert (even though it's not true). If it will continue we will have to exclude Telerik controls from our project.

     

    Best regards

    DS

  9. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 10 Apr Link to this post

    Hello Damian,

    Thank you for the feedback.

    We have already contacted the Comodo's support team but seems like they are whitelisting only a single specific file. The issue is already escalated to our management and we will continue the communication with Comodo to try resolving this false alarm for the Telerik products.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  10. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 28 Apr in reply to Tanya Link to this post

    Hi Tanya,

     

    Is there any feedback on this case?

    Our customers repeatedly report us the Comodo problem. 

     

    Regards

    Damian

  11. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 28 Apr Link to this post

    Hi Damian,

    We contacted the Comodo team but we are still waiting for a reply from their side. I will write here once we have more information to share on the matter.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  12. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 24 May in reply to Tanya Link to this post

    Hi Tanya,

     

    Come one guys... it's been 1,5 month since I've reported the problem to you, we are getting really frustrated...

    We are distributing a commercial application to our customers, how do you think we are trying to explain it to them? ("no, it's not a virus, just close the AV software, don't worry, we will not harm you" - sounds stupid, right?).

    You and Comodo are a large serious companies and both have an interest to solve this problem. Sure you can blame Comodo. But we are your customer. not the Comodos and we have a MAJOR problem with your product. If you still didn't cleared it then either you are not putting enough effort on it, or there is a deeper problem with the Documents.Core dll file and Comodo does not want to white list it...

    I will not remind myself anymore, maybe it's time to start looking at the alternative solutions.

    Best regards

     

     

  13. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 26 May Link to this post

    Hi Damian,

    I completely understand your frustration and I am sorry for that.

    The responses we get from Comodo are that they will check our software and get back to us. We wrote to them several times and just yesterday we finally have a response from their side. Their conclusion is that there are few files that are not digitally signed but should be to add them to the Comodo's trusted vendor list. Those files are a part of one of our web suites and don't affect the Telerik.Windows.Documents.Core.dll in any way. However, Comodo requires all of the products to be checked and satisfying their requirements to add Telerik to the trusted vendors.

    I will need to discuss the topic with the managers of the products and check what we could do to resolve that. I assure you that, if an issue is found in Telerik.Windows.Documents.Core.dll, we will let you know and try to resolve it as soon as possible. As I mentioned before, different versions of this assembly are already tested by Comodo and confirmed that are not harmful.

    Regards,
    Tanya
    Progress Telerik
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  14. Pedro
    Pedro avatar
    1 posts
    Member since:
    Jul 2017

    Posted 18 Jul Link to this post

    Hi,

    I'm having the same problem with Comodo Internet Security.

    Do you have any progress with this issue'

    Best regards,

    Pedro

  15. Tanya
    Admin
    Tanya avatar
    540 posts

    Posted 20 Jul Link to this post

    Hello all,

    We have been notified recently that they didn't receive our emails. However, the issue should be already resolved. I am posting a citation from the reply we received from Comodo:

    "it seems that we had a false-positive problem regarding Telerik.Windows.Documents.Core.dll (all versions of it). Our avlab fixed this false positive and reflection should be live after updating to CIS database 27478. At the same time we are currently whitelisting all your dropped binaries from installer."

    We hope that the issue will not reoccur but if you face any similar difficulties, I would suggest you to directly contact their support as they should be able to assist you.

    I hope this is helpful.

    Regards,
    Tanya
    Progress Telerik
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
Back to Top