topic Re: Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs in General Topics

Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

Jafar_Hussain — Mon, 20 Jul 2020 19:36:07 GMT

Hello,

Palo alto has been released a new signature Virus/Win32.WGeneric.alpvzn
Name: Virus/Win32.WGeneric.alpvzn
Unique Threat ID: 354554856

We are getting Virus alerts in the Threat log for OneDriveSetup.exe.
is that false positive?
how can I stop this threat alert?

I have checked this application is working fine.

Thank you.!!!!!!!!

Re: Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

BPry — Mon, 20 Jul 2020 20:13:01 GMT

@Jafar_Hussain,

Ran into the same issue this morning after my firewalls applied the latest Antivirus update. First I always recommend launching a TAC ticket with possible false positives so that the signature team has more data to work with. Second, you can either downgrade or simply build out a temporary exclusion for the 454554856 signature until PAN pushes out an update.

Re: Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

Jafar_Hussain — Mon, 20 Jul 2020 20:28:05 GMT

@BPry

It, means i need to wait for a next Antivirus signature update?

Re: Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

BPry — Mon, 20 Jul 2020 20:35:07 GMT

@Jafar_Hussain,

I mean you really only have a few options:

1) Wait until the next signature update which hopefully clears up the false positive detection.

2) Create a Virus Exception so it stops registering the threat ID.

Re: Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

Jafar_Hussain — Mon, 20 Jul 2020 20:42:42 GMT

@BPry

Thanks Got it.