Controlled application - Possible false positive

Question

Hello Forum Support,

Last week Sophos flagged the following files under the 'Controlled Application policy' - 'Browser plug-in' - 'Yontoo Apps' policy:

C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\5.0\yFilesAlgorithms.dll

C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\5.5\yFilesAlgorithms.dll

C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Plugins\SMS50\yFilesAlgorithms.dll

C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Plugins\SMS55\yFilesAlgorithms.dll

These files are part of the VMware vSphere Client installation and cannot be removed, however i rather not authorize 'Yontoo Apps' just because somehow these files became part of it.

Where can i inform sophos about this possible false positive and find out what is really going on?

Thanks for your assistance.

Arris

This thread was automatically locked due to age.

QC · Accepted Answer

Hello Arris,

personally I prefer the Sample Submission, maybe the Submit Query form is more appropriate though (please note: you get the option to submit one or more files - which can be an archives - after clicking Next).

Christian