Adlice forum

Software feedback => RogueKiller => Topic started by: Punit Srivastava on June 27, 2017, 09:12:36 PM

Title: Software Whitelisting
Post by: Punit Srivastava on June 27, 2017, 09:12:36 PM
Hi Team,

I would like to introduce our product “Laplink”. We provide predictive device management software for Tech Support Providers, SMBs, IT Helpdesks and anyone who wants to manage end-user devices.
We are associated with the well known organizations of IT sector i.e. HP, DELL, IBM, TOSHIBA and many more. My concern of posting this is related with the white-listing of our product which have a version number 2778. Please verify accordingly. I would request you to white list our product in your database. Please make use of the following link to download and verify our software:

http://service.resolv.com/provision/eula.php?id=dLr64ejy


Since our product is getting blocked from Rogue Killer, our customers are having tough time to utilize it's full fledged functionality. I am expecting a quick response on this. Your favor in white listing process would be highly appreciable.
Thank you in advance!
Title: Re: Software Whitelisting
Post by: Curson on June 27, 2017, 09:22:27 PM
Hi,

Do you use NetFilter SDK 2 technologies in your product ?
Could you please provide a report of RogueKiller detecting your product ?

Regards.
Title: False Positives--Software whitelisting
Post by: Punit Srivastava on June 27, 2017, 09:24:34 PM
Hi Team,

I would like to introduce our product “Dell SuperFix”. We provide predictive device management software for Tech Support Providers, SMBs, IT Helpdesks and anyone who wants to manage end-user devices.
We are associated with the well known organizations of IT sector i.e. HP, DELL, IBM, TOSHIBA and many more. My concern of posting this is related with the white-listing of our product. I am attaching here the 64-bit exes & dll files of our product. Please verify accordingly. I would request you to white list our product in your database. In case, your team needs to download and install our product, please make use of the following link:

https://superfix.dell.nanoheal.com/provision_uatnew/eula.php?id=QG22qOEQ

Note: Please use this link on Dell machine only.

Since our product is getting blocked from Rogue Killer, our customers are having tough time to utilize it's full fledged functionality. I am expecting a quick response on this. Your favor in white listing process would be highly appreciable.
Thank you in advance!
Title: Re: Software Whitelisting
Post by: Punit Srivastava on June 29, 2017, 02:36:06 PM
Hi,
Yes we use NetFilter SDK 2 technologies in our application.
Please find attached the screenshot of the detection,
If you need a report then guide us us how to get the reports for the same.
Thank you.
Title: Re: Software Whitelisting
Post by: Curson on June 29, 2017, 03:06:15 PM
Hi,

RogueKiller reports are located in the following folder :
Quote
C:\ProgramData\RogueKiller\Logs
Please upload the latest one (latest modificatioon date).

Regards.
Title: Re: Software Whitelisting
Post by: Punit Srivastava on July 20, 2017, 09:21:43 AM
Hi
Please find attachment(detection logs)
If you need any more information also let me know.
Thank you.
Title: Re: Software Whitelisting
Post by: Curson on July 20, 2017, 03:25:46 PM
Hi Punit,

Thanks for your feedback.
We will whitelist your software as soon as possible.

However, I noticed your software is also detected by some antivirus engines : d4450f1a4d3e8149d1932d89fe1ca413 (https://www.virustotal.com/fr/file/b4c120d37007bc6d8a602bff946c883a8c6b2314881e8b5f59663c58a1fe3e1a/analysis/)
Please keep in mind that our product also relies on VirusTotal results for detection. You are strongly encouraged to contact these antivirus editors and ask them to whitelist your software, otherwise RogueKiller may continue to detect it in the future.

Regards.
Title: Re: Software Whitelisting
Post by: Punit Srivastava on July 25, 2017, 09:41:01 AM
Hi Curson,

As mentioned before, we have successfully sent mail/submitted sample for whitelisting our exe's from the following antivirus.
Antiy-AVL
CAT-QuickHeal
Jiangmin
Qihoo-360
Rising
As you said earlier you product relies on VirusTotal results for detection right.
Our concern is will you be whitelisting our exe's separately in your database or still we have to wait for those antivirus response/feedback.

Thank You.
Title: Re: Software Whitelisting
Post by: Curson on July 25, 2017, 07:30:10 PM
Hi Punit,

Your software has been whitelisted in our internal database.
However, it will be detected until VirusTotal antivirus engines whitelist it too.

Regards.
Title: Re: Software Whitelisting
Post by: Punit Srivastava on August 29, 2017, 12:17:30 PM
Hi Curson,

Thank you for your help,
We are still facing the issue - rouge Killer still detecting our exe as threat  :(
In virus total few unknown anti virus engines still detecting our exe as threat( as informed before we have initiated Whitlisting our exe's from those unknown anti-virus, but its been a months still no response from those unknown anti-virus company.)

As per the previous conversation we know that you have white-listed our exe in your internal database, also we know that you scan engine depends on VirusTotal results.
My Question is???
In Virus total they use only commandline version of all anti-virus engines - there is huge difference between commandline and actual version while scanning. In the link(https://www.virustotal.com/fr/about/) Virus total mentioned it clearly that using results of VirusTotal testing is a BAD IDEA, so is there any way or any possibilities to overcome this issue as we are getting few escalation mails from our client side. :-[

Regards.
Title: Re: Software Whitelisting
Post by: Curson on August 30, 2017, 02:04:32 PM
Hi Punit,

I'm sorry you are still facing this issue.
Could you please generate a report of RogueKiller latest version detecting your product ?

Regards.
Title: Re: Software Whitelisting
Post by: Punit Srivastava on August 31, 2017, 02:20:07 PM
Thank you Curson,
We are waiting for response from our client side(regarding report).
I will keep you posted.
Title: Re: Software Whitelisting
Post by: Curson on August 31, 2017, 04:58:36 PM
Hi Punit,

You are welcome.
I will wait for your feedback.

Regards.
Title: Re: Software Whitelisting
Post by: Mowen on October 29, 2017, 05:35:03 PM
Hi Punit,

You are welcome.
I will wait for your feedback.

Regards.

Thanks, I finally got it whitelisted.
Title: Re: Software Whitelisting
Post by: Curson on October 29, 2017, 10:18:07 PM
Hi Mowen (aka Punit Srivastava ?),

Thanks for your feedback.
I'm glad that you were able to sort this issue out.

Regards.