Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: louviacl on June 28, 2016, 10:23:31 PM

Title: False positive on Chromium executable
Post by: louviacl on June 28, 2016, 10:23:31 PM
This pretty much affects all recent Chromium builds, but for example, you can try the "chrome-win32.zip" from here.

https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Win/369926/

Win32:MalOb-CA [Cryp]

(https://forum.avast.com/index.php?action=dlattach;topic=187915.0;attach=182734;image)

And here's the Virustotal scan, with 0/56 scanners reporting anything.

https://virustotal.com/en/file/127f9cb39e423ac0ad124738cc4914003c9952148db1537a834106da72dfd4f5/analysis/1467144680/

I reported it as a false positive, but I'm not sure if that feature still works within this really old Avast version.

Can you please fix this in the next database update?
Title: Re: False positive on Chromium executable
Post by: Pondus on June 28, 2016, 10:27:05 PM
virus and false positive problems should be posted in viruses and worms forum section
https://forum.avast.com/index.php?board=4.0

At top there you also find sticky post with how to report   
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438



MalOb - it's a shortcut for "malware obfuscator" - this means that the file was modified with some custom tool to hide the bad things


Title: Re: False positive on Chromium executable
Post by: louviacl on June 28, 2016, 10:30:14 PM
Can you please move this topic to there for me?

And I'll be sure to use the form to submit it.  Thanks.

Just wanted to add that it's very odd how on Virustotal it says that Avast detected nothing in this file.
Title: Re: False positive on Chromium executable
Post by: Eddy on June 28, 2016, 10:31:27 PM
Install the latest version of avast and check if it still detects something.
Title: Re: False positive on Chromium executable
Post by: louviacl on June 28, 2016, 10:33:47 PM
Ok, I'll give it a shot in a VM.

Thanks.
Title: Re: False positive on Chromium executable
Post by: bob3160 on June 28, 2016, 10:33:52 PM
Install the latest version of avast and check if it still detects something.
Judging by your screenshots, you're using a very old version of avast! :)
Title: Re: False positive on Chromium executable
Post by: Pondus on June 28, 2016, 10:35:22 PM
Quote
Can you please move this topic to there for me?
dont have access to do that, but next time you post there   ;)



Title: Re: False positive on Chromium executable
Post by: louviacl on June 28, 2016, 11:01:06 PM
Install the latest version of avast and check if it still detects something.
Judging by your screenshots, you're using a very old version of avast! :)
Yes, and I'm absolutely delighted with it, and I wouldn't trade it for anything else (4.8 x64 on XP x64)  ;)
Title: Re: False positive on Chromium executable
Post by: louviacl on June 29, 2016, 06:04:17 PM
Install the latest version of avast and check if it still detects something.
Ok, I installed the latest version on a Windows 7 VM, and I even disaled digital signature verification in Avast, and it did not detect it as a false positive.

So is this a problem with Version 4.8 itself, or perhaps with the seperate iAVS for 4.8?

Thanks
Title: Re: False positive on Chromium executable
Post by: bob3160 on June 30, 2016, 12:09:41 AM
Install the latest version of avast and check if it still detects something.
Ok, I installed the latest version on a Windows 7 VM, and I even disaled digital signature verification in Avast, and it did not detect it as a false positive.

So is this a problem with Version 4.8 itself, or perhaps with the seperate iAVS for 4.8?

Thanks
It may very well have been something not available in the old version. I don't remember since that's been outdated for several years.