Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on June 27, 2015, 04:29:45 PM

Title: JRT.exe tool False positieve??
Post by: REDACTED on June 27, 2015, 04:29:45 PM

I wanted to download the Junk Removal Tool from BleepingComputer ->  http://www.bleepingcomputer.com/download/junkware-removal-tool/  and then i immediately got the following message from Avast.

(http://www.imgdumper.nl/uploads8/558eb1d1c4afa/558eb1d1bf11f-avast_1.PNG)

(http://www.imgdumper.nl/uploads8/558eb262f1cf7/558eb262f190c-avast_2.PNG)

Only Avast detects this file as malware at this time, this may be a false positive?

Thanks in advance, Dasle

Title: Re: JRT.exe tool False positieve??
Post by: Eddy on June 27, 2015, 04:55:41 PM

It is a false positive.
https://blog.avast.com/tag/false-positive/

Title: Re: JRT.exe tool False positieve??
Post by: Staticguy on June 27, 2015, 09:29:42 PM

I have send a sample of this file to Avast Support ticket under the Avast Virus Labs and I have reported it. Avast will be able to fix this false positive. Ticket number #QDX-526-64336. We shall wait and be patience.

Title: Re: JRT.exe tool False positieve??
Post by: Cast on June 27, 2015, 10:53:25 PM

I reported it as well.

Title: Re: JRT.exe tool False positieve??
Post by: polonus on June 27, 2015, 11:41:36 PM

One of the minor Chinese AV also had a FP detection, but metascan gives it as all green: https://www.metascan-online.com/en/scanresult/file/74a4a8ef250a43948956c9a1f38f2c2f

polonus

Title: Re: JRT.exe tool False positieve??
Post by: Staticguy on June 27, 2015, 11:58:26 PM

Yeap! It's called Jiangmin

https://www.virustotal.com/en/file/5811fa2d10c25abb4c25b598301d61c480c32668b539d14aa049c52bdb5c9214/analysis/1435440074/

Title: Re: JRT.exe tool False positieve??
Post by: polonus on June 28, 2015, 12:01:42 AM

Right, Metascan also had the Jiangmin heuristical FP earlier t0-day, but has dropped the detection now.

pol

Title: Re: JRT.exe tool False positieve??
Post by: Cast on June 28, 2015, 07:51:39 AM

Interesting thing about JRT is when I had tried to download it onto my fathers computer with IE, smart screen alerted me to it being a dangerous program.

Title: Re: JRT.exe tool False positieve??
Post by: REDACTED on June 28, 2015, 08:39:02 AM

The problem with the FP is solved, thanks for the quick response.  ;)

Title: Re: JRT.exe tool False positieve??
Post by: DavidR on June 28, 2015, 02:16:58 PM

Thanks for taking the time to confirm that.