Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: silvershield on October 07, 2009, 06:50:19 AM

Title: False positive report Avast Pro/Home
Post by: silvershield on October 07, 2009, 06:50:19 AM

Hello,

We are the developers of a program for monitoring computer activity. Since 2X-th of September Avast became to identify our program as virus. But it isn't a virus, it's a legal program! Other anti-virus programs such as Kaspersky or NOD32 don't identify our program as virus, only Avast.  What should we do?  How to solve this problem?  Where should I address and what information I should give?  Thank you.

Regards

Title: Re: False positive report Avast Pro/Home
Post by: Milos on October 07, 2009, 11:15:06 AM

Hello,
ways to report false positves are:
1) Follow the link "Report as false positive..." from "avast! Warning" window, marked at the picture below.
2) Send e-mail to virus@avast.com with "False positive" in subject and password protected attachement (to e-mail body write which password was used and link to this forum topic).
3) Provide here link to download the program which we identified as virus.

Milos

Title: Re: False positive report Avast Pro/Home
Post by: silvershield on October 09, 2009, 02:28:01 PM

Hello,

Thank you for answer. We have already done variant 1), but till no reaction ...
Link to download a client part of program (the part of which Avast detected as virus): www.lanagent.ru/user28.rar
Thank you.

Regards

Title: Re: False positive report Avast Pro/Home
Post by: silvershield on October 14, 2009, 08:17:46 AM

Hello,

We'd like to recieve any feedback on our message...  Identification as Malware-gent is incorrect in our case.

Title: Re: False positive report Avast Pro/Home
Post by: CharleyO on October 14, 2009, 08:20:40 AM

***

Welcome to the forums, silvershield.   :)

May I ask, what is the name of your program?


***

Title: Re: False positive report Avast Pro/Home
Post by: Marc57 on October 14, 2009, 08:29:09 AM

This is also being detected by Microsoft Security Essentials as Backdoor:Win32/Delf.BN. This threat is classified as a Trojan - Backdoor   

Title: Re: False positive report Avast Pro/Home
Post by: Lisandro on October 14, 2009, 01:37:08 PM

Edited  :-[

Title: Re: False positive report Avast Pro/Home
Post by: Milos on October 14, 2009, 01:38:26 PM

Hello,
thank you for direct link to you program (LanAgent) -- monitor of user activity (maybe reason of MSE detection). The detection will be fixed in next VPS update.

Milos

Title: Re: False positive report Avast Pro/Home
Post by: Marc57 on October 14, 2009, 05:32:29 PM

I've submitted this file to the Microsoft Malware Protection Center as a possible false positive.

Title: Re: False positive report Avast Pro/Home
Post by: Marc57 on October 15, 2009, 06:20:07 PM

Microsoft has changed the way MSE detects this file, but it's still detected.

Title: Re: False positive report Avast Pro/Home
Post by: Milos on October 16, 2009, 07:46:51 AM

MS changed detection from Backdoor:Win32/Delf.BN to MonitoringTool:Win32/LanAgent. It will be detected as PUP in Avast! 5.

Milos

Title: Re: False positive report Avast Pro/Home
Post by: silvershield on October 28, 2009, 08:42:07 AM

Ok, thank you !
Regards