Avast WEBforum

Consumer Products => Avast Mobile Security => Avast Mobile Security for Android => Topic started by: Filip Havlicek on March 21, 2013, 11:30:01 AM

Title: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 11:30:01 AM: Hi everyone,

it seems that this false positive detection somehow got through our systems to everyone. I'm sorry for that. Don't worry though, there should be a virus definitions update soon that will remove this detection. I'm going to reroute all topics to this one and lock them so everyone knows what's happening. I'll post here when the update is out so everyone can do a manual update of their definitions to fix this (or you can, of course, wait for the automatic update to happen, but manual will most probably be faster in this case).

Filip
Title: Re: About Android:FakeInst-EY
Post by: ganon on March 21, 2013, 11:35:12 AM: Thank God it's avast not real viruses, any eta on the update?
Title: Re: About Android:FakeInst-EY
Post by: deank88 on March 21, 2013, 11:35:41 AM: Fantastic, thank you! 8)
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 11:37:47 AM: Hi,

you might actually try updating right now :) I can see the update already available in some locations.

Filip
Title: Re: About Android:FakeInst-EY
Post by: ganon on March 21, 2013, 11:40:40 AM: Not in the UK yet, hopefully it'll be out soon!
Title: Re: About Android:FakeInst-EY
Post by: angeloskas on March 21, 2013, 11:46:41 AM: Hello from Athens.
It seems that I have the latest update but still I get the same warning...
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 11:50:37 AM: Hi,

the latest update should be version 130320-01. In case of user apps, you can run apps scan which should clear the detections. In case of system apps, running the apps should clear the detections (that applies for user apps as well, but it should be faster to just run the apps scan).

Filip
Title: Re: About Android:FakeInst-EY
Post by: angeloskas on March 21, 2013, 11:53:15 AM: Mine is 130321-00
I just re-scanned and still get warnings
Title: Re: About Android:FakeInst-EY
Post by: ercalamar on March 21, 2013, 11:53:40 AM: Hello from Spain!!!! :D

Not updated :'(
Title: Re: About Android:FakeInst-EY
Post by: ShanghaiWall on March 21, 2013, 12:02:35 PM: Sorry for the offtop, but the name of the update is the date it was released, right? So you just cancelled today's update? Mine is 130321-00 and no update is available yet. Also, what does (in 4 hours) mean near the update version title? What in 4 hours? Update will be available, or what?
Title: Re: About Android:FakeInst-EY
Post by: XTM on March 21, 2013, 12:03:28 PM: Hello from Austria,

Here we have also the problem with 130321-00.
Waiting for 130321-01 but stell get the Info 130321-00 is up to date ...
Title: Re: About Android:FakeInst-EY
Post by: EvilElectronX on March 21, 2013, 12:06:38 PM: Hello,
the same in Germany...
Title: Re: About Android:FakeInst-EY
Post by: mburgerh on March 21, 2013, 12:11:21 PM: I've got version 130321-00 as last version and a lot of my apps are supposedly infected.
I'm from the Netherlands
Title: Re: About Android:FakeInst-EY
Post by: eddysep on March 21, 2013, 12:14:00 PM: Greetings from London

No new update available yet in the UK.

Version 130321-00 (updated 4 hours ago) started the reporting of FakeInst [Trj] on my device.

Regards

Eddy
Title: Re: About Android:FakeInst-EY
Post by: SamsungConvert on March 21, 2013, 12:18:17 PM: Same here UK.

current version 130321-00 (4 hours ago)
Still getting FakeInst-EY on 4-5 apps.
Title: Re: About Android:FakeInst-EY
Post by: ganon on March 21, 2013, 12:19:23 PM: No luck for me yet (in the uk)
Title: Re: About Android:FakeInst-EY
Post by: cbardet on March 21, 2013, 12:25:59 PM: Same in Switzerland
V. 130321-00

No update of Avast! at this time...
Title: Re: About Android:FakeInst-EY
Post by: mrkPL on March 21, 2013, 12:29:54 PM: Same in Poland... :(
Title: Re: About Android:FakeInst-EY
Post by: aa1477888 on March 21, 2013, 12:32:44 PM: Same in Taiwan...
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 12:33:55 PM: Hi,

yeah, sorry, mistyped - it should be 130321-01. Can you try again?

Filip
Title: Re: About Android:FakeInst-EY
Post by: werdna72 on March 21, 2013, 12:35:46 PM: Update not yet available in UK
Title: Re: About Android:FakeInst-EY
Post by: chiller89 on March 21, 2013, 12:36:05 PM: I just got the update now, seems to fix the problem :)

Location: South Africa :)
Title: Re: About Android:FakeInst-EY
Post by: ercalamar on March 21, 2013, 12:38:00 PM: Spain updated (manually) :D

Thanks!!!!
Title: Re: About Android:FakeInst-EY
Post by: angeloskas on March 21, 2013, 12:38:19 PM: Quote from: Filip Havlicek on March 21, 2013, 12:33:55 PM
Hi,

yeah, sorry, mistyped - it should be 130321-01. Can you try again?

Filip

The update was not available before.
I just installed it, ran scan and confirm no warnings
Title: Re: About Android:FakeInst-EY
Post by: werdna72 on March 21, 2013, 12:38:53 PM: All OK now. That was fun!
Title: Re: About Android:FakeInst-EY
Post by: XTM on March 21, 2013, 12:42:55 PM: Austria "back to normal"
THX
Title: Re: About Android:FakeInst-EY
Post by: eddysep on March 21, 2013, 12:44:06 PM: Greetings from London

Just updated from 130321-00 to 130321-01 all back to normal!

Thanks Avast!
Title: Re: About Android:FakeInst-EY
Post by: wpn on March 21, 2013, 12:45:41 PM: 130321-01 fixed my FP's. (NL)
my users tho are stressed because i blocked synchronisation with the mailserver when they notified us of trojans on their phones :)
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 12:46:17 PM: Quote from: eddysep on March 21, 2013, 12:44:06 PM
Greetings from London

Just updated from 130321-00 to 130321-01 all back to normal!

Thanks Avast!

Nah, thanks to you for bearing with our mistakes :)

Filip
Title: Re: About Android:FakeInst-EY
Post by: ganon on March 21, 2013, 12:47:21 PM: Updated ..... But samba mobile widget is still reported (false positive) FIX PLEASE!!!
Title: Re: About Android:FakeInst-EY
Post by: Sinisa.a on March 21, 2013, 12:50:36 PM: Here is Serbia still no update... Hope you fix it soon :)
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 12:54:26 PM: Quote from: ganon11000 on March 21, 2013, 12:47:21 PM
Updated ..... But samba mobile widget is still reported (false positive) FIX PLEASE!!!

Widget? What's the detection? If it is still FakeInst-EY then I would try rebooting your device. Widgets should be scanned during apps scan as well, but you never know.

Filip
Title: Re: About Android:FakeInst-EY
Post by: ganon on March 21, 2013, 01:03:08 PM: Fixed: it was the GoBackup backup of the apk so I needed to scan files not just apps!
Title: Re: About Android:FakeInst-EY
Post by: mburgerh on March 21, 2013, 01:06:06 PM: The Netherlands received 130321-01 and all is well.
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 01:07:44 PM: Quote from: ganon11000 on March 21, 2013, 01:03:08 PM
Fixed: it was the GoBackup backup of the apk so I needed to scan files not just apps!

Glad it's OK :)

Filip
Title: Re: About Android:FakeInst-EY
Post by: chuckpint on March 21, 2013, 01:09:35 PM: I've got version 130321-01 and it is still reporting PayPal Here as infected after an update and rescan.
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 01:11:10 PM: Quote from: chuckpint on March 21, 2013, 01:09:35 PM
I've got version 130321-01 and it is still reporting PayPal Here as infected after an update and rescan.

Hi,

what's the detection?

Filip
Title: Re: About Android:FakeInst-EY
Post by: rmathus4 on March 21, 2013, 01:17:25 PM: The following are all being reported as Malware:

Amazon Kindle
Amazon
Tabbed Out
ScoreCenter
Google Currents
GMail
HTC Mobile Sync
redbox
YPMobile

They are of type:
Trojan Detected - Android:FakeInst-EY[Trj]

Thanks.

Edit: I checked for updates manually in Avast! and the problem appears to be resolved. Those applications are not reporting as malware any longer.
Title: Re: About Android:FakeInst-EY
Post by: Luli.BR on March 21, 2013, 01:26:00 PM: Hi Everyone,

Same was happening here in Brazil, but it seems the 130321-01 update solved the issue just fine!

I just had to reboot my device for it to work!

Thanks everybody!
Title: Re: About Android:FakeInst-EY
Post by: Skirmash on March 21, 2013, 01:32:51 PM: Hello from the USA,

Just ran an app scan with definition version 130321-01. Following aps detected .. all with Android:FakeInst-EY[Trj]

Pulse
Amazon Kindle
Amazon
Touchpal Contacts
Gmail
Hotels.com
Flightboard
MOG
Roku
Group Play
WABE
Viber

Regards ...

EDIT Problem now resolved! Followed advice above and tried to manually update definitions. Even though it was reported that no further update was available, a subsequent app scan produced zero results.
Title: Re: About Android:FakeInst-EY
Post by: daniel.carcich on March 21, 2013, 01:44:57 PM: I'm getting the same message for:
Republic Wifi+
Bungie
Humble Bundle Beta

I have version 130321-01.

EDIT RESOLVED: Rebooted device following manual update (though it said it already was updated) and rescanned - no malware found.
Title: Re: About Android:FakeInst-EY
Post by: rickyman1 on March 21, 2013, 01:45:23 PM: No Update in Germany! Please fix it!
Title: Re: About Android:FakeInst-EY
Post by: cavey on March 21, 2013, 01:46:41 PM: ok for singapore too, just did a manual update and all is ok
Title: Re: About Android:FakeInst-EY
Post by: rickyman1 on March 21, 2013, 02:02:06 PM: Still no Update in Germany. Used Avast Version 130321-01
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 21, 2013, 02:06:22 PM: 130321-01 is the correct version, do a rescan of apps (and files) to get rid of most of the warnings, the rest will clean themselves as you use the apps.

Filip
Title: Re: About Android:FakeInst-EY
Post by: DerFalke on March 21, 2013, 02:09:19 PM: Still no Update in Germany. Used Avast Version 2.0.3917

- Y! Mail V 2.0.7
- GMail V 4.3

Now, after a new scan :

- Currents V 2.1.0
- WhatsApp V 2.9.3936
- reBuy.de V 1.0.6
- Programm Manager (t-online) V 3.0.4
Title: Re: About Android:FakeInst-EY
Post by: ericktonin on March 21, 2013, 02:17:00 PM: It´s ok for Brazil too!
Atualização deu certo para o Brasil tb... finalmente.
Title: Re: About Android:FakeInst-EY
Post by: Sinisa.a on March 21, 2013, 02:45:49 PM: OK in Serbia, also!
Title: Re: About Android:FakeInst-EY
Post by: T.C.Lai on March 21, 2013, 03:03:07 PM: I am in Hong Kong
my version is 130321-01
still detected (FakeInst-EY) is a virus
I tried manual update, but no update found
Title: Re: About Android:FakeInst-EY
Post by: DerFalke on March 21, 2013, 03:04:24 PM: Okay in Germany, too !

Thanks for helping !

Have a nice day.
Title: Re: About Android:FakeInst-EY
Post by: chanecia on March 21, 2013, 03:18:49 PM: I have the avast android on my htc. I've just scanned and had malware messages for amazon kindle, amazon, linkedin, apprenticeships and companies house apps. Should I assume these are errors too?
Title: All fine, big scare, I am in Venezuela
Post by: JIMKOVACS on March 21, 2013, 09:16:20 PM: I almost uninstalled 7 apps.
Turns out it was a false positive.
My Avast updated and all is good. If you don't get the update, do it manually.
BIG scare, though.... on the other hand, it means Avast is cooking ! Thanx.
Title: Re: About Android:FakeInst-EY
Post by: jonnysolar on March 28, 2013, 05:01:21 PM: Never had the issue before, and it seems to have picked up a problem now though, a week after this has been discussed and apparently fixed. Why would it take so long to manifest itself???

And also, another difficulty, registering my acast mobile to the account I have just set up on here - it claims either the email address or password doesn't match - I don't think so!!! Having registered less than 5 minutes previously, I am pretty damn sure I know exctly what has just been entered!

Getting really rather pissed off with it now - been wasting a couple of hours for it now! >:( >:(
Title: Re: About Android:FakeInst-EY
Post by: Filip Havlicek on March 28, 2013, 07:26:00 PM: Hi,

after reading what you wrote elsewhere, this is not the issue you are experiencing.

I suggest you start a new thread about the account issue, otherwise it won't get proper attention.

Filip