Security Risk?

[thepregnantgod]

Drashna, see attached file regarding Norton's positive on drivepool.service.exe

 

I'm using the latest Beta.

Win 10 x64 (fully updated)

 

 

[Christopher (Drashna)]

what version specifically?

And definitely a false positive. 

 

 

Also, the sad part is that all of our exe's are signed, and "verifiable". But that apparently isn't enough anymore. And because our code is obfuscated, ...

[thepregnantgod]

Version 2.2.0.746 BETA

[Christopher (Drashna)]

Thanks.  Can confirm, and have submitted to Norton/Symantec for review. 

[Spider99]

Hi Chris

 

I have today installed Symantec Endpoint Protection (V14.0) and it has picked up drivepool.notifications.exe as a potential virus

 

 

 

as you can see it's a different "risk" to the original OP

 

Win 2012r2 E and DP 742

[Christopher (Drashna)]

Hi Chris

 

I have today installed Symantec Endpoint Protection (V14.0) and it has picked up drivepool.notifications.exe as a potential virus

 

Capture.PNG

 

as you can see it's a different "risk" to the original OP

 

Win 2012r2 E and DP 742

 

 

See how it's "Trojan.Gen.8!cloud", emphasis mine?  The "Gen" part indicates "generic", as it... it's not a true match, but probably identified by the heuristic (predictive) scanner.  

 

If you have the option, submit it for review, as this is definitely a false positive.