Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 4 subscribers
  • Views 5492 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Java 8 Update 11 deemed a pua

Leanne Atkins

Morning everyone

Has anybody seen the following being reported this morning. If so could you tell me if this is a false positive?

 

AppData\LocalLow\Oracle\Java\jre1.8.0_111\java_sp.dll\FILE:0001" belongs to adware or PUA 'Generic PUA ND'



This thread was automatically locked due to age.
  • +1

    Hello Leanne Atkins,

    could you tell me if this is a false positive?
    this is, as its name says, a Generic detection and there's always a chance that generic detections are too wary.
    As with all generic detections and also if in doubt please submit a sample to Labs. If it's indeed an FP an appropriately updated detection will be released within hours.

    Christian

  • +1

    We are also having same issue, so awaiting for the latest update and/or permanent solution...

     

    Threat detected: xxxxxxxx: Generic PUA ND detected at 2016-11-19 06:03:51
    File Path: C:\Users\xxxxxxxx\AppData\LocalLow\Oracle\Java\jre1.8.0_111\java_sp.dll\FILE:0001

     

     

    Thank you,

    Narendra

  • 0 in reply to NarendraBuddhanna

    Hello Narendra,

    awaiting for the latest update
    did you send a sample? For more or less "popular" applications Labs will rather sooner than later either notice themselves or get samples from customers. Of course it is one's right to wait until an update is available and also to complain that it doesn't happen fast enough. IMO the preferable course of action is to send a sample though.

    Please note that even when you download something reputable from a reputable source it's not guaranteed that it's not compromised. Furthermore it's not guaranteed that all downloads are identical. downloads.acme.com nowadays has not a single IP but either resolves to different addresses or directs you to different download servers depending on your location/ISP/DNS service - and therefore a compromise could be just regional.

    Christian

Unfiltered HTML