False positive - Ransom.Filelocker in legit trading software

[davidredstone]

Hi MWB,

 

I work for ANZ Bank in Australia, and our customers have started reporting MWB says our Trading Platform E*TRADE Pro has Ransom.Filelocker

 

Our website is etrade.com.au or invest.etrade.com.au, and the active trader software MSI is downloadable from here:

https://invest.etrade.com.au/pro/msi/proclient6.3.61.msi

 

Please scan for the false detection and update in your next cycle. I have attached a pic of my scan result. Thank you.

 

David R

Techinical Support

E*TRADE Australia

 

[David H. Lipman]

Specifically the False Positive is in Nevron.System.DLL
 

https://www.virustotal.com/en/file/be72e9573cd53a6786ff2f8c844588d28990897eccd843cc9d46b02e263fcf30/analysis/1447122533/

 

c:\1\1\Nevron.System.DLL (Ransom.FileLocker) -> No action taken. [d823bebda1eab87e287b7dc5e71d8e72]

 
Nevron.System.zip

[miekiemoes]

Hi,

 

This will get fixed in next database update.

Thanks for reporting!

[blender]

Defs 2015.11.10.01 has the fix for this.

 

Thanks for reporting!

[davidredstone]

Great, thank you! Our customers will be happy (and I won't receive angry calls).

 

Dave.