Telerik.Windows.Documents.Core.dll Detected as Virus By Comodo

12 posts, 0 answers
  1. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 Link to this post

    Telerik Support,

    Just wanted to give a heads-up, was having an interesting problem with a client where our app wouldn't start up, eventually learned it was because Telerik.Windows.Documents.Core.dll was identified as a trojan by their Comodo One client and quarantined.  Attached is a report of us adding the file to the exclusion list.

    Thanks,

    Kyle

  2. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 12 Aug 2016 in reply to Kyle Link to this post

    Sorry, forgot to mention we're on v2016.2.421.40 of Telerik Controls for WPF.
  3. Tanya
    Admin
    Tanya avatar
    504 posts

    Posted 16 Aug 2016 Link to this post

    Hi Kyle,

    We are not aware why the antivirus software is detecting the dll as a trojan, but I can assure you that our files are scanned quite often and we haven't detected any malware. It is possible that a file is considered as a thread because it is downloaded from the internet or it interacts with the file system.

    I believe that adding the file to the exception rules of the antivirus will be a safe approach to move forward.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  4. Tanya
    Admin
    Tanya avatar
    504 posts

    Posted 19 Aug 2016 Link to this post

    Hello Kyle,

    I'm writing to let you know that we contacted Comodo to check why our assembly is detected as a malware and they confirmed it is not harmful. The false positive alarm is now fixed and you shouldn't experience similar issues if you upgrade the Comodo antivirus database to version <25641> or later.

    Regards,
    Tanya
    Telerik by Progress
    Do you need help with upgrading your AJAX, WPF or WinForms project? Check the Telerik API Analyzer and share your thoughts.
  5. Kyle
    Kyle avatar
    19 posts
    Member since:
    Jan 2011

    Posted 19 Aug 2016 in reply to Tanya Link to this post

    Awesome!  Thank you so much, didn't expect any action on your (Telerik's) part as obviously it's Comodo's problem and not yours, very appreciative!
  6. Phil
    Phil avatar
    1 posts
    Member since:
    Jan 2017

    Posted 18 Jan in reply to Kyle Link to this post

    I believe that this false positive problem is ongoing because today (January 18, 2017) I installed COMODO Internet Security Premium 10 (version 10.0.0.6092) with the latest virus signature files.   Very shortly after installation it quarantined the Telerik.Windows.Documents.Core.dll file which is included with our corporate phone system software.  COMODO Internet Security Premium 10 thinks (incorrectly) that the file contains malware "Backdoor.Win32.NetWiredRC.DS.@346199067"

    FYI the version of Telerik.Windows.Documents.Core.dll we are using is 2015.1.0401.40

    It's not hard to go to the Quarantine and also add the file to the "excluded files" list but it would be better if the program did not do a false positive on this file in the first place.

     

    I submitted the Telerik.Windows.Documents.Core.dll file as a false positive.

  7. Tanya
    Admin
    Tanya avatar
    504 posts

    Posted 20 Jan Link to this post

    Hello Phil,

    Thank you for reporting this and for sending the report to Comodo.

    Since it was confirmed on their side that the alarm is false positive, I am afraid that the only thing we can do is to send reports to the team supporting the antivirus and there is not much we can do on our side to avoid putting the assembly under quarantine.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  8. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 06 Apr Link to this post

    Hello,

    I can confirm that still there is a problem with false positive. Today one of our customers reported about a Comodo alert about Telerik.Windows.Documents.Core.dll. The version of Telerik package we are using is 2016.3.914.40.

     

    Could you please take an action, so that Comodo would remove this false positive alert. We are hitting a reputation decrease when our customers see the alert (even though it's not true). If it will continue we will have to exclude Telerik controls from our project.

     

    Best regards

    DS

  9. Tanya
    Admin
    Tanya avatar
    504 posts

    Posted 10 Apr Link to this post

    Hello Damian,

    Thank you for the feedback.

    We have already contacted the Comodo's support team but seems like they are whitelisting only a single specific file. The issue is already escalated to our management and we will continue the communication with Comodo to try resolving this false alarm for the Telerik products.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  10. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 28 Apr in reply to Tanya Link to this post

    Hi Tanya,

     

    Is there any feedback on this case?

    Our customers repeatedly report us the Comodo problem. 

     

    Regards

    Damian

  11. Tanya
    Admin
    Tanya avatar
    504 posts

    Posted 28 Apr Link to this post

    Hi Damian,

    We contacted the Comodo team but we are still waiting for a reply from their side. I will write here once we have more information to share on the matter.

    Regards,
    Tanya
    Telerik by Progress
    Want to extend the target reach of your WPF applications, leveraging iOS, Android, and UWP? Try UI for Xamarin, a suite of polished and feature-rich components for the Xamarin framework, which allow you to write beautiful native mobile apps using a single shared C# codebase.
  12. Damian
    Damian avatar
    3 posts
    Member since:
    Oct 2015

    Posted 1 day and 9 hours ago in reply to Tanya Link to this post

    Hi Tanya,

     

    Come one guys... it's been 1,5 month since I've reported the problem to you, we are getting really frustrated...

    We are distributing a commercial application to our customers, how do you think we are trying to explain it to them? ("no, it's not a virus, just close the AV software, don't worry, we will not harm you" - sounds stupid, right?).

    You and Comodo are a large serious companies and both have an interest to solve this problem. Sure you can blame Comodo. But we are your customer. not the Comodos and we have a MAJOR problem with your product. If you still didn't cleared it then either you are not putting enough effort on it, or there is a deeper problem with the Documents.Core dll file and Comodo does not want to white list it...

    I will not remind myself anymore, maybe it's time to start looking at the alternative solutions.

    Best regards

     

     

Back to Top