Spotify.exe > Falsepositive "Heur.Suspicious"

J_G · May 21, 2009, 1:38am

Spotify.exe is detected as Heur.Suspicious!

Product site: Spotify - Web Player: Music for everyone < Need an invite to download the software though :-\

Name of detection: Heur.Suspicious[at]19392093

Virus sig database number: 1177

Edit: It was the real-time scanner that detected spotify,
realtime scanner is set to On Access, and Heuristics level is set to Medium.

Spotify is a music player !-)

Hope you can fix this ASAP!

Cheers, J_G

gmohan · May 21, 2009, 5:53am

Hi J_G,

We will get back to you after investigation

Regards,
-Chandra Mohan

LeoniAquila · May 22, 2009, 9:35am

Heur.Suspicious for me too, during a scan. Medium heuristic level.

No need for invitation to download and install Spotify, however, you need an account to login to the program.

craigt44 · May 22, 2009, 10:55am

Same problem here as well, only started today.

jteale · May 22, 2009, 3:47pm

Is there any further news why spotify is being deleted due virus ident. Do we have any indication when it might be fixed.

J_G · May 23, 2009, 12:20am

Hi Leoni A ,

I got the Heuristics on Medium as well, only diff is that it was the real-time scanner that detected Spotiy for me !-).

Idk wich level the other persons got the Heuristics on.

Cheers, J_G

J_G · May 23, 2009, 3:19am

WOW McAfee ALSO detects malware inside of spotify.exe! True or Not?? :o

http://translate.google.com/translate?prev=hp&hl=sv&js=n&u=http%3A%2F%2Fwww.idg.se%2F2.1085%2F1.231347%2Fmcafee-varnar-for-virus-i-spotify&sl=sv&tl=en&history_state0=

Edit: Now it seems that McAfee confirms that it was an FP after all ;D

Now let’s hope that Comodo can confirm that it indeed is an FP as well

Cheers, J_G

linux · May 23, 2009, 6:49am

Same here.
C:/Program/Spotify/Spotify.exe - Heur.Suspicious@19691588.

Deleted it by misstake, have to install it again but i wait until theres more info here.

sriramp · May 23, 2009, 9:04am

Hi,

Thank you for your submission. We have found the false positive and will be fixed in the subsequent updates.

Regards,
Sriram.P

JoWa · May 23, 2009, 9:09am

Will the uninstaller (Uninstall.exe) be fixed? Heur.Suspicious@19848844

Thanks.

Vaishnavik · May 23, 2009, 10:43am

Hi JoWa,

We have found the false positive and shall be fixed in the next update.

Thanks and Regards,

Vaishnavi.V.K

linux · May 23, 2009, 1:04pm

Spotify.exe is ok now, Comodo updated. Still warning on Uninstall.exe and something called Au_.exe in temp (when i try to uninstall Spotify).

linux · May 24, 2009, 12:53pm

Heur.Suspicious@19848844 is what i get from Uninstall.exe, i also get this in a Au_.exe in Temp when i try to Uninstall Spotify.

LeoniAquila · May 24, 2009, 6:16pm

How can FPs be fixed when they are triggered by heuristics, not signatures?

languy99 · May 24, 2009, 6:33pm

I would suspect white list.

LeoniAquila · May 25, 2009, 8:09am

Makes sense! :-La

linux · May 25, 2009, 4:29pm

Is this “repaired” yet?

JoWa · May 25, 2009, 4:44pm

Yes.

linux · May 26, 2009, 3:23pm

Looks okey now.

Thanks

Vaishnavik · May 28, 2009, 2:59pm

Hi,

Reported FP has been fixed.

Please verify with DB 1211.

Thanks and Regards,

Vaishnavi.V.K