Author Topic: False Positiv Nvidia Driver?  (Read 8077 times)

0 Members and 1 Guest are viewing this topic.

Hexo

  • Guest
False Positiv Nvidia Driver?
« on: December 27, 2010, 02:11:10 PM »
My avast found a virus in the latest Nvidia Driver 260.99.
http://www.virustotal.com/file-scan/report.html?id=ea4bf07d32467feb4d4c9e9dea031fecee8af2bbd740257998e07163f0cbcd96-1293453445

Is this a false positiv?

By the way... yesterday avast got a problem with the ati driver... today with nvidia... whats going on?
I hope it was not a decision to change to avast...

Greetz Hexo

Hermite15

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #1 on: December 27, 2010, 02:13:51 PM »
wow can't believe it, after ATI yesterday (now fixed), it's NVidia's turn... will check that in a minute.

Hermite15

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #2 on: December 27, 2010, 02:27:24 PM »
okay I got it too after updating to 101227-0 (101226-1 was still fine ;D )

ps: of course same FP with NV 263.09 (5** series)
« Last Edit: December 27, 2010, 02:30:22 PM by Logos »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: False Positiv Nvidia Driver?
« Reply #3 on: December 27, 2010, 02:28:20 PM »
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.

- In the meantime (if you accept the risk), add the full path to the file to the exclusions lists:
File System Shield, Expert Settings, Exclusions, Add and
avast Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

Though given the location of this I don't believe it is active, or no doubt avast's file system shield would probably have alerted. So perhaps no need to rush to exclude it, just monitor it in the chest as suggested.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Hexo

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #4 on: December 27, 2010, 02:29:17 PM »
Thank Logos.
But what is going on with avast? Is that normal, that they have so much FP`s???
I am new with avast. While i was using avira i have never had a FP

EDIT: I summited the file already.
I think really that this must be a FP.
« Last Edit: December 27, 2010, 02:31:25 PM by Hexo »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: False Positiv Nvidia Driver?
« Reply #5 on: December 27, 2010, 02:32:57 PM »
Hello,
thank you for notice, false positive will be fixed.

Milos

Hermite15

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #6 on: December 27, 2010, 02:38:47 PM »
okay, @David, the problem with submitting an FP through the UI is that it won't be sent before the next update ;D (when it's already fixed, if it's been reported and noticed on the forums).

@Hexo: you've been lucky, as Avita is reputed for being the champion of FPs, while Avast rarely has any.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: False Positiv Nvidia Driver?
« Reply #7 on: December 27, 2010, 02:46:00 PM »
okay, @David, the problem with submitting an FP through the UI is that it won't be sent before the next update ;D (when it's already fixed, if it's been reported and noticed on the forums).

It is sent during update checks, it doesn't rely on there being an update present.

When I submit a file, I always do a manual update to force the upload during the update. I also believe that when you have a file for submission, it doesn't wait for the next 'routine' auto update check. Vlk said there is some sort of prioritisation, I can't recall exactly what he said.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Hermite15

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #8 on: December 27, 2010, 02:48:57 PM »
okay, @David, the problem with submitting an FP through the UI is that it won't be sent before the next update ;D (when it's already fixed, if it's been reported and noticed on the forums).

It is sent during update checks, it doesn't rely on there being an update present.

not sure about this, I thought the contrary, that an actual update had to happen, and not just a check, but okay, you may be right...
« Last Edit: December 27, 2010, 02:53:16 PM by Logos »

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: False Positiv Nvidia Driver?
« Reply #9 on: December 27, 2010, 02:50:43 PM »
okay, @David, the problem with submitting an FP through the UI is that it won't be sent before the next update ;D (when it's already fixed, if it's been reported and noticed on the forums).

It is sent during update checks, it doesn't rely on there being an update present.

not sure about this, I thought the contrary, that an actual update had to happen, and not just a check, but okay, you may be right...
He is right since I do that when I want to send a virus to avast and that works
Dreams don't die, they just fall asleep.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: False Positiv Nvidia Driver?
« Reply #10 on: December 27, 2010, 02:53:52 PM »
As I submit many samples and always do a manual update to get it away. I monitor the update 'check' and part of that is the upload of the sample, see image example.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Hermite15

  • Guest
Re: False Positiv Nvidia Driver?
« Reply #11 on: December 27, 2010, 02:58:51 PM »
As I submit many samples and always do a manual update to get it away. I monitor the update 'check' and part of that is the upload of the sample, see image example.

okay so np, you're right. I had no idea as I never submit anything (have no reason to either,  don't test malware), except once a year like today ;D, testing someone else's FPs.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: False Positiv Nvidia Driver?
« Reply #12 on: December 27, 2010, 03:38:07 PM »
Btw, FPs can also be sent with this interface...
http://www.avast.com/contact-form.php?loadStyles
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0