PUP and dSploit

[mauro1970mvr]

why does it avast consider some intrusive programs as PUP instead of actually detecting real threats?

Avast Mobile Security sees the app dSploit a network detection and sniffing utility app as PUP. I have seen the source and there is no malware in it. I reported this as a false positive but it's still detected as malware.

Avast desktop does the same thing with programs that run the 'net user' command.

What is the criteria to determine what PUP is or is not.?
Wouldn't Avast Theft be considered PUP as well? After all its behavior is far more intrusive than the apps Avast detects as PUP.

[SugarD-x]

I'm getting the same thing running "Where's My Droid" in parallel to Avast! Anti-Theft, (due to my phone not being rooted, it's a nice combination). It claims it's PUP too, but it's clearly not.

[Flippy]

Hello folks,

well here is quick review what Pup detection is ->

A PUP (potentially unwanted program) is a program that may be unwanted, despite the possibility that users consented to download it. PUPs include spyware, adware, and dialers, and are often downloaded in conjunction with a program that the user wants.

If you could send me strictly version of your aplication I can check if its real Pup or not..

Thank you and best regards,

Filip Chytrý
Virus Analyst

[SugarD-x]

If you could send me strictly version of your aplication I can check if its real Pup or not..

http://play.google.com/store/apps/details?id=com.alienmanfc6.wheresmyandroid

I'm fairly certain that is a false positive as it has been around longer than Avast! has been on Android.

[REDACTED]

Bump this issue as despite reporting this as a false positive through your android app, i get this notification daily...

[Flippy]

Well this applications has unstandard behavior. So thats a reason to detected it as PUP. Its able to track your phone or setup other stuff in system. If you really wanna use this aplication there is nothing easier than switch off Pup notifications in Avast.

[SugarD-x]

Well this applications has unstandard behavior. So thats a reason to detected it as PUP. Its able to track your phone or setup other stuff in system. If you really wanna use this aplication there is nothing easier than switch off Pup notifications in Avast.

It is supposed to track your phone. It does the same thing as Avast! Anti-Theft does. It's a well-known app that has been around for a very long time on Android.

[tscateh]

I am also having issues with a False Positive report on Where's My Droid.  When I called in to the support line, they told me to re-install Avast!, but that has not resolved my issue with it.  Please FIX THIS ASAP.  It's incredibly irritating.

I don't want to turn off PUP detection, since there might actually be malware out there.  But it isn't this valid app.

tscateh!

[Lisandro]

I am also having issues with a False Positive report on Where's My Droid.  When I called in to the support line, they told me to re-install Avast!, but that has not resolved my issue with it.  Please FIX THIS ASAP.  It's incredibly irritating.

I don't want to turn off PUP detection, since there might actually be malware out there.  But it isn't this valid app.

tscateh!

If it is a PUP we cannot change this fact. Like Flippy said, you'll have to disable the PUP detection. PUPs are not false positives.

[SugarD-x]

I am also having issues with a False Positive report on Where's My Droid.  When I called in to the support line, they told me to re-install Avast!, but that has not resolved my issue with it.  Please FIX THIS ASAP.  It's incredibly irritating.

I don't want to turn off PUP detection, since there might actually be malware out there.  But it isn't this valid app.

tscateh!

If it is a PUP we cannot change this fact. Like Flippy said, you'll have to disable the PUP detection. PUPs are not false positives.

How is that not a false positive? Avast! is improperly detecting the program because of how it works, when it's specifically meant to work that way. That would be like saying another anti-virus program detecting Avast! Anti-Theft as a PUP is valid.

[bassrick]

I would add that there should be NO REASON why the "Where's My Droid" app cannot be added to the list of PUP's that should be ignored by Avast and allowed to run.  The mobile app gives you an ignore button, but all it does is ignore the alarm, but it disables my the app. 

If you can't fix it, short of disabling PUP's, then I guess I need to find another protection app.

[svehlak]

This application contains some structures, which are very similar to malware and it is actually detected not only by AVAST, but either by other AV companies. I sent the APK to our virus lab and we will see what can we do; anyway, author / developer of this application is probably OK with this detection, so there is no reason for us to stop detect is as PUP.

[bassrick]

Has the author stated when they will remove the detection and allow the program to work?  Next week, next month, next year?

[Lisandro]

Has the author stated when they will remove the detection and allow the program to work?  Next week, next month, next year?

I think the author cannot remove the detection, only avast! team can manage its own detection. But, the author, could modify the code to avoid this detection as PUP. But, will he go for it? Won't the app lose its purposes?

[swalker23]

It is something Avast has to do.  I emailed alienman tech and he is doing what he can to fix the problem.  Several antivirus/malware apps fix their issue with this.  I am getting very annoyed with the PUP message also.

Message in play store:
** Antivirus warnings **
If you have an antivirus app that is reporting Where's My Droid as a virus you may need to update your antivirus app. We contacted many app developers about this false report and many have fixed it in recent updates.