Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

[Jafar_Hussain]

@hisingh 

Hello,

Palo alto has been released a new signature Virus/Win32.WGeneric.alpvzn
Name: Virus/Win32.WGeneric.alpvzn
Unique Threat ID: 354554856

We are getting Virus alerts in the Threat log for OneDriveSetup.exe.
is that false positive?
how can I stop this threat alert?

I have checked this application is working fine.

Thank you.!!!!!!!!

[BPry]

@Jafar_Hussain,

Ran into the same issue this morning after my firewalls applied the latest Antivirus update. First I always recommend launching a TAC ticket with possible false positives so that the signature team has more data to work with. Second, you can either downgrade or simply build out a temporary exclusion for the 454554856 signature until PAN pushes out an update. 

[Jafar_Hussain]

@BPry 

It, means i need to wait for a next Antivirus signature update?

[BPry]

@Jafar_Hussain,

I mean you really only have a few options:

1) Wait until the next signature update which hopefully clears up the false positive detection.

2) Create a Virus Exception so it stops registering the threat ID.

[Jafar_Hussain]

@BPry 

Thanks Got it.