Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: crofty59 on June 15, 2006, 08:19:11 AM

Title: False Positive
Post by: crofty59 on June 15, 2006, 08:19:11 AM: Hi

I am getting a false positive for CEDP Stealer 3.5

I am being told i have Win32- Adware - gen [Adw] in the uninstaller

My daughter has had this program for over 1 year.

Checked with Virus Total on-line scan Avast only one showing any infections.
I tried to send a sample to Avast, but i couldn't get it to go.

Would appreciate if someone could show me how to do it right.

Cheers
Title: Re: False Positive
Post by: DavidR on June 15, 2006, 02:21:22 PM: You coulkd also try Jotti.

Also see (Mini Sticky) False Positives (http://forum.avast.com/index.php?board=2;action=display;threadid=7779)

Quote
I tried to send a sample to Avast, but i couldn't get it to go.
How did you try to send and what were the problems/errors ?
Title: Re: False Positive
Post by: Lisandro on June 15, 2006, 03:47:52 PM: Quote from: crofty59 on June 15, 2006, 08:19:11 AM
I tried to send a sample to Avast, but i couldn't get it to go.
How did you try this?

1. You can send an email with the file (false positive or infected) to: virus@avast.com You can zip and password the files... Inform a link to this thread and the password used.

2. You can send the files to Chest and, from there, resend to Alwil for analysis.

3. You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

Thanks.
Title: Re: False Positive
Post by: crofty59 on June 16, 2006, 05:17:34 AM: Hi

I tried to put in zip folder but it went through the process, but the zip folder contained no info.

I ended up sending an email by using the chest.

Cheers
Title: Re: False Positive
Post by: Lisandro on June 16, 2006, 05:48:19 AM: Quote from: crofty59 on June 16, 2006, 05:17:34 AM
I tried to put in zip folder but it went through the process, but the zip folder contained no info.
Did you disable the Standard Shield to do that?
If avast is detecting a 'false positive' it won't allow you to add this 'infected' file to a zip... :-[
Title: Re: False Positive
Post by: crofty59 on June 16, 2006, 12:22:49 PM: Quote from: Tech on June 16, 2006, 05:48:19 AM

Did you disable the Standard Shield to do that?
If avast is detecting a 'false positive' it won't allow you to add this 'infected' file to a zip... :-[

Hi Tech

No i didn't, next time i will try that.
Thanks a million.

Cheers :-[
Title: Re: False Positive
Post by: crofty59 on June 21, 2006, 03:05:48 PM: Disappointed

Have now sent 2 emails to Alwil this way. I have the file to Chest and, from there, i have resent it to Alwil for analysis.

I also added comments and placed my email address to make sure Alwil had it.
So far no reply and there has been 5 virus definitions updates.

To stop getting the virus warning i have placed the file in exclude (Hoping nothing does infest this file.

Cheers
Title: Re: False Positive
Post by: DavidR on June 21, 2006, 03:34:00 PM: Generally avast won't contact you unless they require any more information.

If Virus Total and Jotti are showing only avast detecting this then I think you have little to fear, considering you have been using/had this program for over a year.

Did you put False Positive in the emails Subject as this may separate it from the other 3999 emails that avast receive at virus @ avast.com per day. You would need to do that after the email is in your outbox as I don't think you can change it from the chest process of compiling the email info.
Title: Re: False Positive
Post by: crofty59 on June 22, 2006, 04:31:41 AM: Hi DavidR

Thanks for your reply, and valuable input.

Today it doesn't show up as a virus.

I'm a Happy Camper again.

Cheers