Trojan/RansomDecoy.A detections show as ‘Ignored’ under the ‘Threats detected by the antivirus’ panel
Related Products_
- Advanced EPDR
- Advanced EDR
Issue Status_
Resolved in Hotfix / v.8.00.24.X
Symptoms_
Trojan/RansomDecoy.A detections show as ‘Ignored’ under the Threats detected by the antivirus in the Status Security panel of the Advanced EPDR/EDR management console instead of under the Malware activity panel and classified as, for example, ‘Sent to quarantine’.
Solution_
A hotfix is available to resolve this issue.
To apply a hotfix on the affected endpoint:
- Download and save the hotfix file to the endpoint: hf-wgua4713-pknact.exe
- Double-click the downloaded file.
- The hotfix installation does not require that the computer restart. However, under certain circumstances, you might be prompted to restart for the hotfix to be fully applied. If you cannot restart the computer immediately, select No when prompted. This postpones the application of the hotfix until the next system restart.
Note: To download an unattended or silent version of the hotfix, click here. The hotfix is applied after the next system restart.
Release Notes_
Next, find all the changes the hotfix includes.
Affected Versions
- v8.00.23.0000 and v8.00.23.0001 versions.
To see your Advanced EPDR/EDR product version, see this article.
Registry Key Details
The hotfix updates these files:
File Name | Value | File Version | Modified Date | Hotfix included in future versions? |
---|---|---|---|---|
PKNAct.dll | C:\Program Files (x86)\Panda Security\WAC\PKNAct.dll | 4.6.4.83 | 22 November, 2024 | Yes. Future version |
Verify Hotfix Application
To confirm the correct application of the hotfix, check the file version (in File Details section) or verify the values of these registry keys:
32-Bit Architecture | 64-Bit Architecture | ||
---|---|---|---|
Registry Key | Value | Registry Key | Value |
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_PKNAct | Revision [REG_DWORD] 1 |
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_PKNAct | Revision [REG_DWORD]1 |
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_PKNAct | Result [REG_DWORD]
0 = Success |
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_PSKNAct | Result [REG_DWORD]0 = Success 1 = Not Applied 2 = Error 9 = On Reboot Operation |