Watchdog PC Cleaner being flagged as False Positive

[WatchdogDevelopmentLLC]

We make Watchdog PC Cleaner.

This is where you can download the file for Watchdog PC Cleaner in the VirusTotal report below that you are blocking.

https://www.watchdogdevelopment.com/en/download/pc-cleaner

You classified this file as generic.ml threat.

https://www.virustotal.com/#/file/5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d/d...

MD5:  6336043049ec687d0fd234a4beae6dbf

SHA-1:  9aa368721b75832281ce98c811a1811df5f3f0e0

SHA-256:  5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d

Authentihash:  314872eb1a46cb3b9abe2cb643f70709f8794a3315e4b0bb972c65d84e22dd36

Imphash:  ac220fb01eeea4ecb84da554526c3e36

This program is now an APPESTEEEM CERTIFIED PROGRAM as you can clearly see here https://customer.appesteem.com/certified?vendor=WTCHD so it not ADWARE.

We went through a rigorous process to meet every condition to be CERTIFIED so this program is not deceptive in any way or form.

PLEASE MARK WATCHDOG PC CLEANER AS SAFE!

Have someone contact me about this and if you need confirmation, contact AppEsteem below:

Kathleen Notario - knotario@appesteem.com   

Dennis Batchelder - denbatch@appesteem.com  

Hong Jia - hongjia@appesteem.com  

David Finn - dfinn@appesteem.com

Regards,

Watchdog Development Support

Tel:  1-888-488-7531

[kevinclepalo]

Hello,

File sample with SHA-256:

5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d

has been submitted for re-analysis and re-categorization as appropriate.

Please allow at least 24 hours for our analysts to review this file and confirm if a verdict change is appropriate.

[WatchdogDevelopmentLLC]

Please note that all the companies have marked this as safe and will be updating their signatures on VirusTotal too.  Here are the confirmation emails from Symantec (Norton) and McAfee who also has this file listed as a false positive.

From: MB Data Submission [mailto:_3f35b@McAfee.com]
Sent: Thursday, February 22, 2018 1:49 AM
To: Watchdog Development Support Team; DL Data Submission _13166e@McAfee.com
Subject: RE: I need these 2 programs whitelisted - FALSE POSITIVES

Dear Sir/Madam,

Thank you for contacting us.

Issue has been fixed and the submitted files have been Whitelisted.

Let us know in case of any issues.

Regards,

McAfee Data Submission Team

-----Original Message-----
From: falsepositives@symantec.com [mailto:falsepositives@symantec.com]
Sent: Thursday, February 22, 2018 3:00 AM
To: Watchdog Development Support Team
Subject: Symantec has whitelisted WPC (73795)

In relation to submission 73795.

Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:

    File name: Watchdog.PCCleaner.2018.Setup.exe

    MD5: 6336043049ec687d0fd234a4beae6dbf

    SHA256: 5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d

    Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update

If detection persists, please contact support:

* Norton: https://support.norton.com/sp/en/us/home/current/info

* SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html

Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.

For more information on best practices to reduce false positives:

https://www.symantec.com/content/en/us/enterprise/white_papers/b-to_increase_downloads-instill_trust...

Sincerely,

Symantec Security Response

https://www.symantec.com/security-center

[WatchdogDevelopmentLLC]

You wrote saying that I would have a response in 24 hours and I quote "Please allow at least 24 hours for our analysts to review this file and confirm if a verdict change is appropriate."   It has been way over 24 hours and I have not received any responses yet since that response was submitted to me on Thursday, Feb 22nd.

[bvandivier]

Please note that a minimum of 24 hours was specified.

"Please allow at least 24 hours for our analysts to review this file and confirm if a verdict change is appropriate."

Your sample is in queue and will be processed in the order that it was received.  We do not guarantee an SLA for verdict change requests which are submitted outside of a support case.  We do appreciate your patience and our analysts will process the sample you have submitted as soon as possible.

Thank you for understanding.

[WatchdogDevelopmentLLC]

Thank you, looking forward to the whitelist.

[WatchdogDevelopmentLLC]

It looks like Palo Alto has whitelisted this file as this report below which I have run many times since shows Palo Alto as clean.

https://www.virustotal.com/#/file/5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d/d...

I was never notified that you whitelisted this BTW.

[mivaldi · Accepted solution]

5851c0ad8577eb07ea8418a8702e31ac546b662f369fc530863068a1411d4c8d has been analyzed and found to be Benign.

The associated signatures have been removed from our Antivirus database.