Перейти к содержимому


Фото
- - - - -

What is Program.Unwanted.3985 and how to resolve it?

False Positive

  • Please log in to reply
5 ответов в этой теме

#1 Justin-Easeware

Justin-Easeware

    Newbie

  • Members
  • 2 Сообщений:

Отправлено 15 Май 2019 - 12:54

Hello!

 

This is Justin with Easeware. The developer of Driver Easy.

 

We notice that DrWeb is reporting Driver Easy as Program.Unwanted.3985 in VirusTotal since last month.

 

https://www.virustotal.com/#/file/b814f641c46323196770063249274563c3c6ef1b1b90fff875aced6ef9f65250/detection

 

After we reported false positives on https://vms.drweb.com/sendvirus/?lng=enfor many times, this issue is still unresolved because the reply we got after  submitting is always "Greetings, Your request has been analyzed. This is not a false positive.Thank you for the cooperation". And there's no replies from DrWeb after that, although we've sent many emails to DrWeb.

 

So I have to writing to you in this forum because we were unable to resolve this issue through the standard ways you offer. I appreciate your kind understand.

 

Would you please tell me the definition of Program.Unwanted.3985? We're more than willing to cooperate with the Dr Web technical team to resolve this issue. Please tell us what we did wrong and we will fix the problem as fast as it is technically possible.

 

If possible, we also want to know who we should contact to resolve this problem. Thanks in advance!

 

Have a great day!

 



#2 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 655 Сообщений:

Отправлено 15 Май 2019 - 15:29

Hi!

1-st of all, please calm down and stay cool. :) Program.Unwanted is a class of potentially unwanted programs, NOT a viruses and Dr.Web doesn't treat such progs as a viruses/trojans. Yes, this is not a false positive. We believe that any critical software, such as device drivers, should be downloaded only from the official sites. If the program downloads something unknown from unknown places, then it can be ranked as unwanted. And we are obliged to warn our users about this. Unfortunately you can't resolve this issue, IMHO... Sad but true.

 

Have a nice day!



#3 Justin-Easeware

Justin-Easeware

    Newbie

  • Members
  • 2 Сообщений:

Отправлено 16 Май 2019 - 13:42

Hi!

1-st of all, please calm down and stay cool. :) Program.Unwanted is a class of potentially unwanted programs, NOT a viruses and Dr.Web doesn't treat such progs as a viruses/trojans. Yes, this is not a false positive. We believe that any critical software, such as device drivers, should be downloaded only from the official sites. If the program downloads something unknown from unknown places, then it can be ranked as unwanted. And we are obliged to warn our users about this. Unfortunately you can't resolve this issue, IMHO... Sad but true.

 

Have a nice day!

 

Hi Dmitry_rus, thanks for your quick response! Sorry for my late reply.

 

We now clearly know Why Dr.Web regards our application as Pramgram.Unwanted.3985 BUT we still believe it is due to some misunderstanding that Dr.Web lists Driver Easy as PUA.
 
Driver Easy uses only genuine drivers, straight from the hardware manufacturer. So they’re exactly the same drivers you’d find if you sourced them from the manufacturer yourself. The big difference is we thoroughly test them – on hundreds of computers, with all the most popular combinations of hardware and software – before including them in Driver Easy. Most are also officially certified by Microsoft as ‘Compatible with Windows’ – if their manufacturers chose to put them through Microsoft’s rigorous Windows Hardware Quality Labs testing process. (And the drivers for Windows 10 are required to pass Microsoft WHQL tests by default.). For more details, please see https://www.drivereasy.com/driver-easy-certified/
 
After users scan for driver updates in Driver Easy, on the scanning result screen, Driver Easy will identify if the driver passed Microsoft WHQL tests or not. As you can see in the screenshots below:
 
Driver-Easy1.png
 
Driver-Easy2.png
 
When they're going to install the updated driver files using Driver Easy, Windows OS will also perform further verification on the drivers before updating.
 
When users install non-WHQL-Class Driver Packages, Windows will display a Windows Security warning dialog box:
 
Windows-cant-verify-the-publisher-of-thi
 
As you can see in https://technet.microsoft.com/en-us/ff547534(v=vs.96), Windows has considerations that apply when users install non-WHQL-class driver packages on Windows Vista and later versions of Windows.
 
For many users, it's time-consuming to find and download the correct updated driver files from the official website of the hardware manufacture, especially for the users who don’t have the time, patience or computer skills. When they need to update their drivers, the free version of Driver Easy is a good helper to them, because with the free version of Driver Easy, they can download the correct drivers with just 1 click and they can manually install those drivers with the built-in Device manager in Windows OS.
 
Sir, we do believe it's due to some misunderstanding that Dr.Web lists Driver Easy as PUA. And this issue can be easily resolved if you can tell us who we should contact to resolve this problem. We can resolve this issue if we work together. Thanks in advance!
 
Have a nice day!


#4 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 655 Сообщений:

Отправлено 16 Май 2019 - 14:27

Hi Justin!

 

Only one thing I can recommend:

https://support.drweb.com/new/detection_issue/

Describe your situation in details or/and copy a link from here. Speaking honestly there are a very little chances to resolve your issue, but try this. No guarantees, naturally.

 

Have a nice day!



#5 asegerno

asegerno

    Newbie

  • Posters
  • 5 Сообщений:

Отправлено 13 Июль 2022 - 08:54

Justin-Easeware #3

Please remove the destruction image or "drivereasy.com/picture/*yourpic*.png" by post a message



#6 asegerno

asegerno

    Newbie

  • Posters
  • 5 Сообщений:

Отправлено 13 Июль 2022 - 08:57

Indeed, PUA malicious evaluation of other factory software must not allow the transition to the anti-virus software being use authorization

Justin-Easeware





Also tagged with one or more of these keywords: False Positive

Читают тему: 1

0 пользователей, 1 гостей, 0 скрытых