False Positives

G

Guest

We've noticed on several developer machines Windefend Eventid 3004 for

- service:FILEMON701
- driver:ASP.NET_2.0.50727

Surprised that these were detected?
 
J

JRosenfeld

jeffg60nj said:
We've noticed on several developer machines Windefend Eventid 3004 for

- service:FILEMON701
- driver:ASP.NET_2.0.50727

Surprised that these were detected?

I think that if you look further down the description it will be because
these files are not yet known as OK to WD. Unfortunately, it gives the same
message (detected spyware or potentially unwanted software) for the files it
does not know about as well as for the files it knows to be bad.

Spynet is, IMO rather slow at updating the known good files database. Some I
sent in several months ago are still being shown as not yet classified, or
unknown. Ditto for recent MS files (e.g. the ASP.NET 2 file you found).

If you don't want it to create event logs for unknown files, in Tools,
options, uncheck 'software that has not yet been classified for risks',
click save. Of course you then also don't get alerted for files that
actually are bad but not yet in WD's database as bad. With the
notifications, for unknowns, you at least have the chance of making a
judgement yourself.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top