Telerik UI for WPF false positive

[sol_amp]

Hi,

We're a software company that develops a piece of software (an addin for Microsoft Office) that auto-updates itself. Our software uses the widely acknowledged third party UI framework 'Telerik UI for WPF'.

That framework is developed by Progress (formerly known as Telerik), which is one of the leading vendors of software libraries/frameworks for software developers.

A dll-file in their framework, which our software uses and which is distributed as part of our software installation, is getting flagged as a false positive.

I have attached relevant reports, log files and the problematic dll itself in a zip file. The password for the zip-file is: 123

Can you please look into why the dll is getting flagged? It's interesting because none of the other Telerik files that we use are getting flagged. The zip also contains a dll from Telerik that is not getting flagged by MalwareBytes.

Best regards

Sol

MalwareBytes Telerik false positive.zip

[sol_amp]

Bump... anyone?

[David H. Lipman]

There are no detections by MBAM and Virus Total on the two DLL files.

https://www.virustotal.com/gui/file/6511be7d17e007e33939d4f0ccfd18435b41a2e2d864816ae2dde9452bf41e6a/detection

https://www.virustotal.com/gui/file/e84c3c239c595f71d8f34feac2afdb2282dc01bf6309641f1df57ef26d08fe81/detection

[cli]

This is an exploit detection and should be located in https://forums.malwarebytes.com/forum/192-exploit/. I'll pass this to the right people. Sorry for the delay.

[Arthi]

Hi sol_amp,

I have sent a DM to you. Thanks.