Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: exodius on December 02, 2013, 05:41:08 AM

Title: Avast detects 7zip.exe as virus
Post by: exodius on December 02, 2013, 05:41:08 AM
Hi,
7zip.exe detected as virus by avast. 7zip.exe is clean and trusted, why avast detects it as malware? I download it from here http://dl.7-zip.org/7z932.exe
Sample file: http://www.datafilehost.com/d/29bda322
Title: Re: Avast detects 7zip.exe as virus
Post by: Pondus on December 02, 2013, 05:44:45 AM
have you tested the file(s) at www.virustotal.com / www.metascan-online.com / www.jotti.org




You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
how to use the chest.    http://www.avast.com/faq.php?article=AVKB21




Title: Re: Avast detects 7zip.exe as virus
Post by: exodius on December 02, 2013, 05:54:59 AM
I have scan it online, no viruses found, here the results:

https://www.metascan-online.com/en/scanresult/file/90fcc84da4bf47a3b8a2e18cef1acf08

https://www.virustotal.com/id/file/88340e1a7565f3f1f60d01f9adcc1b41cca7f84a26c0384cba62f99d0fd46a97/analysis/1385958703/

http://virusscan.jotti.org/en/scanresult/588ec407c1dca807fc9e1e14c42cd652610b2757
Title: Re: Avast detects 7zip.exe as virus
Post by: Lisandro on December 02, 2013, 12:46:42 PM
Strange, no warnings with my 7zip x64 here...
Title: Re: Avast detects 7zip.exe as virus
Post by: DavidR on December 02, 2013, 01:28:42 PM
I have reported it.

Looks like avast doesn't like the setup file for some reason |>$INSTDIR\ and subsequently 7z.exe. Now is it the $INSTDIR\ it doesn't like or 7z.exe which hasn't alerted on my system.
Title: Re: Avast detects 7zip.exe as virus
Post by: Lisandro on December 02, 2013, 02:07:25 PM
Thanks David.
Title: Re: Avast detects 7zip.exe as virus
Post by: DavidR on December 02, 2013, 03:57:04 PM
Hopefully they will pick up on it as I reported it as a website alert with the link to the hXXp://dl.7-zip.org/7z932.exe file and a link back to this topic.
Title: Re: Avast detects 7zip.exe as virus
Post by: Tetsuo on December 02, 2013, 04:12:34 PM
Days ago, after examining the file via DeepScreen, Avast automatically put an exception for C:\(...)\7-Zip\7zG.exe in the DeepScreen exclusion list.
OS is Win XP Pro SP3.
Title: Re: Avast detects 7zip.exe as virus
Post by: DavidR on December 02, 2013, 04:26:22 PM
Web Shield scans don't incorporate the DeepScreen (which would put a heavy load on the system), also the file the web shield is alerting on within the installation file is 7z.exe.

Original alert:
02/12/2013 12:12:35   hXXp://dl.7-zip.org/7z932.exe|>$INSTDIR\7z.exe [L] Win32:Evo-gen [Susp] (0)

During subsequent scanning in the partial download file in the temp folder it found.
02/12/2013 12:20:14   C:\Documents and Settings\UserName\Local Settings\Temp\aw0b0noL.exe.part|>$INSTDIR\7z.exe [L] Win32:Evo-gen [Susp] (0)
02/12/2013 12:20:46   C:\Documents and Settings\UserName\Local Settings\Temp\aw0b0noL.exe.part|>$INSTDIR\7z.sfx [L] Win32:Evo-gen [Susp] (0)
Title: Re: Avast detects 7zip.exe as virus
Post by: Eddy on December 02, 2013, 04:44:18 PM
The 9.3 version is still alpha. Could be it is solved in the final release of zip.
Title: Re: Avast detects 7zip.exe as virus
Post by: DavidR on December 02, 2013, 04:56:36 PM
Just got an email response to my report:
Quote
Dear Customer,
Thank you for your e-mail and for using avast! as your antivirus solution.
Our virus specialists have been working on the problem and it's already fixed.
If I can be of further help in this matter, please do not hesitate to get in touch with me.

Regards,

Hopefully this will appear in a streaming update of the next VPS update.
Title: Re: Avast detects 7zip.exe as virus
Post by: Tetsuo on December 02, 2013, 04:58:18 PM
Just to avoid any possible confusion, I was talking about 7-Zip 9.20, the stable version.