Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: jvidal on July 15, 2015, 08:10:58 PM

Title: avast flagging utorrent as virus!!!!!!
Post by: jvidal on July 15, 2015, 08:10:58 PM
Ok, this is just too much. This "evo-gen" nightmare HAS TO STOP NOW!!!!!!!

I've been dealing with countless "evo-gen" false positives for quite a while, but this is just too much.

Someone please put a stop to this nightmare once and for all.

The incredibly high rate of false positives is absolutely unacceptable!

In case you're wondering, avast flags utorrent 3.4.3.40633 as "evo-gen[susp]". Analizing it with avast reports NOTHING, but if I try to run it, it's blocked. This happens WAY TOO OFTEN, with several different files.


Title: Re: avast flagging utorrent as virus!!!!!!
Post by: DavidR on July 15, 2015, 08:20:04 PM
Please post a screenshot of the avast alert.

If it is truly alerting on utorrent (not the seed locations or files) - surely you are able to add this file to the exclusions ?
Title: Re: avast flagging utorrent as virus!!!!!!
Post by: Pondus on July 15, 2015, 08:55:33 PM
Quote
avast flagging utorrent as virus!!!!!!
No it does not .... Win32:Evo-gen [susp] = Suspicious

Title: Re: avast flagging utorrent as virus!!!!!!
Post by: Eddy on July 15, 2015, 09:39:15 PM
https://www.virustotal.com/en/file/77c520bfbe40809bdd365e545e044b0d5f16fd027efebac30442530673b08d9f/analysis/1436987589/
http://r.virscan.org/report/b35fe8aa6741482c121f296ffba3d0d5

uTorrent is screwing up.
A newer version is already installed ?
Eh, ok, but why does it say there is a newer version available  and asking you if you want to update ?
Latest version is already installed.
Downgrade?
Really strange question.
If you select no, you get "can't update uTorrent"

And last but not least, I've just checked and avast isn't blocking it at all.

Quote
Analizing it with avast reports NOTHING, but if I try to run it, it's blocked.
avast is not a analyzing tool.
Quote
The incredibly high rate of false positives is absolutely unacceptable!
So, you rather have a high rate of infections on your system ?
Title: Re: avast flagging utorrent as virus!!!!!!
Post by: jvidal on July 16, 2015, 12:25:46 AM
Oh "avast is not an analyzing tool"???? Are you for real????
One of the functions of an AV is ANALYZING A FILE in search of viruses.

No, of course I wouldn't want to get infected, but the amount of false positives by avast is unacceptable. Maybe once in a while, ok, but I get a lot EVERY SINGLE DAY, I report them and the avast team does NOTHING TO FIX THEM.

There's a utility called "chrome offline link sniffer", used to get the latest download links for google chrome stand-alone installers. I've been reporting FOR MONTHS that it's not a virus and still gets flagged as virus. And that's only one example out of the dozens of false positives I get...

Title: Re: avast flagging utorrent as virus!!!!!!
Post by: Pondus on July 16, 2015, 12:45:30 AM
Quote
There's a utility called "chrome offline link sniffer", used to get the latest download links for google chrome stand-alone installers. I've been reporting FOR MONTHS that it's not a virus and still gets flagged as virus. And that's only one example out of the dozens of false positives I get...
Avast is/was not the onlyone that did not like it

Scan here is 5months old

https://www.virustotal.com/en/file/cec4192dd942c5a7dac48c447bc28454326122792a8c1e6f5fd9fb5258791514/analysis/

Quote
Advanced heuristic and reputation engines

ClamAV Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: http://www.clamav.net/doc/pua.html .

F-Secure Deepguard Suspicious:W32/Malware!Gemini

Symantec reputation Suspicious.Insight



Title: Re: avast flagging utorrent as virus!!!!!!
Post by: Eddy on July 16, 2015, 12:34:25 PM
As what is the "chrome offline link sniffer" by avast ?
As malware or as a PUP ?
Title: Re: avast flagging utorrent as virus!!!!!!
Post by: REDACTED on July 16, 2015, 06:37:07 PM
Hello,

Do we know yet if uTorrent.exe is a false positive? Of course, the file can be easily added to the exclusion list, but is that really safe? And, right now, uTorrent program updates can only be done with Avast shields temporarily disabled -- not a good thing under any circumstance.

Could someone with the company, please shed some light on current testing results on uTorrent build 40633 (or later), expected fixes, and provide some guidance on best practices in the interim. Thanks very much for responding and for Avast! Free, generally.
Title: Re: avast flagging utorrent as virus!!!!!!
Post by: Milos on July 17, 2015, 10:17:31 AM
Hello,
uTorrent build 40633 uses OpenCandy (PUP).

Milos