Author Topic: False positive on Chromium executable  (Read 1499 times)

0 Members and 1 Guest are viewing this topic.

Offline louviacl

  • Newbie
  • *
  • Posts: 18
False positive on Chromium executable
« on: June 28, 2016, 10:23:31 PM »
This pretty much affects all recent Chromium builds, but for example, you can try the "chrome-win32.zip" from here.

https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Win/369926/

Win32:MalOb-CA [Cryp]



And here's the Virustotal scan, with 0/56 scanners reporting anything.

https://virustotal.com/en/file/127f9cb39e423ac0ad124738cc4914003c9952148db1537a834106da72dfd4f5/analysis/1467144680/

I reported it as a false positive, but I'm not sure if that feature still works within this really old Avast version.

Can you please fix this in the next database update?

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35095
Re: False positive on Chromium executable
« Reply #1 on: June 28, 2016, 10:27:05 PM »
virus and false positive problems should be posted in viruses and worms forum section
https://forum.avast.com/index.php?board=4.0

At top there you also find sticky post with how to report   
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438



MalOb - it's a shortcut for "malware obfuscator" - this means that the file was modified with some custom tool to hide the bad things


« Last Edit: June 28, 2016, 10:33:23 PM by Pondus »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline louviacl

  • Newbie
  • *
  • Posts: 18
Re: False positive on Chromium executable
« Reply #2 on: June 28, 2016, 10:30:14 PM »
Can you please move this topic to there for me?

And I'll be sure to use the form to submit it.  Thanks.

Just wanted to add that it's very odd how on Virustotal it says that Avast detected nothing in this file.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31381
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: False positive on Chromium executable
« Reply #3 on: June 28, 2016, 10:31:27 PM »
Install the latest version of avast and check if it still detects something.

Offline louviacl

  • Newbie
  • *
  • Posts: 18
Re: False positive on Chromium executable
« Reply #4 on: June 28, 2016, 10:33:47 PM »
Ok, I'll give it a shot in a VM.

Thanks.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 39304
  • 58 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: False positive on Chromium executable
« Reply #5 on: June 28, 2016, 10:33:52 PM »
Install the latest version of avast and check if it still detects something.
Judging by your screenshots, you're using a very old version of avast! :)
Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1809 64bit, 8 Gig Ram, AvastFree 18.7.2354, WinPatrol, Unchecky How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35095
Re: False positive on Chromium executable
« Reply #6 on: June 28, 2016, 10:35:22 PM »
Quote
Can you please move this topic to there for me?
dont have access to do that, but next time you post there   ;)



Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline louviacl

  • Newbie
  • *
  • Posts: 18
Re: False positive on Chromium executable
« Reply #7 on: June 28, 2016, 11:01:06 PM »
Install the latest version of avast and check if it still detects something.
Judging by your screenshots, you're using a very old version of avast! :)
Yes, and I'm absolutely delighted with it, and I wouldn't trade it for anything else (4.8 x64 on XP x64)  ;)

Offline louviacl

  • Newbie
  • *
  • Posts: 18
Re: False positive on Chromium executable
« Reply #8 on: June 29, 2016, 06:04:17 PM »
Install the latest version of avast and check if it still detects something.
Ok, I installed the latest version on a Windows 7 VM, and I even disaled digital signature verification in Avast, and it did not detect it as a false positive.

So is this a problem with Version 4.8 itself, or perhaps with the seperate iAVS for 4.8?

Thanks

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 39304
  • 58 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: False positive on Chromium executable
« Reply #9 on: June 30, 2016, 12:09:41 AM »
Install the latest version of avast and check if it still detects something.
Ok, I installed the latest version on a Windows 7 VM, and I even disaled digital signature verification in Avast, and it did not detect it as a false positive.

So is this a problem with Version 4.8 itself, or perhaps with the seperate iAVS for 4.8?

Thanks
It may very well have been something not available in the old version. I don't remember since that's been outdated for several years.
Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1809 64bit, 8 Gig Ram, AvastFree 18.7.2354, WinPatrol, Unchecky How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq