Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: a_catalin on December 27, 2011, 09:36:21 AM

Title: exe files generated by my program seen as false positive
Post by: a_catalin on December 27, 2011, 09:36:21 AM

Hi.
Sorry for my english.

I am a Delphi programmer.
Among the programs that I made is this one: http://forums.mydigitallife.info/threads/26932-2-small-utilities-for-Spoon-Studio
There you will find the program (ExeBuilder), sources and explanations about how it works.
Basically it takes a standard exe stored in resources, it changes it to load a exe file from the virtualized program made with Spoon Studio then adds icon(s) and informations from the original exe.
So it does the same thing as other programs like VMWare Thinapp.
The difference is that the exes made by VMWare Thinapp are not shown sometimes as infected.
Users who have some knowledge about computers will maybe understand that "Win32:Trojan-gen" means that Avast thinks that the file is maybe infected but is not sure.
But there are users who don't know this and think it's infected.

I do not think it's correct that these exes should be seen as infected (even if it's a "generic/heuristic").

Here you can find a zip file with a modified exe that is seen infected + the original exe (before modification): https://rapidshare.com/files/2493244345/samples.zip
But, since you're also computer programmers, I think you'll understand fast what this program does (from its sources).
Could you please set Avast not to "see" the exe files generated by my program as infected..?
Thanks in advance for your help.

Best regards, Catalin

Title: Re: exe files generated by my program seen as false positive
Post by: Asyn on December 27, 2011, 09:38:27 AM

You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles

Title: Re: exe files generated by my program seen as false positive
Post by: a_catalin on December 27, 2011, 09:47:28 AM

Thank you for the suggestion.
Unfortunately I just tried and after I clicked on "send message" it showed a page with "417 - Expectation Failed" as title and body. So I don't know if the message was sent.

Title: Re: exe files generated by my program seen as false positive
Post by: Asyn on December 27, 2011, 09:51:13 AM

Quote from: a_catalin on December 27, 2011, 09:47:28 AM

Thank you for the suggestion.
Unfortunately I just tried and after I clicked on "send message" it showed a page with "417 - Expectation Failed" as title and body. So I don't know if the message was sent.

Please try again, if it doesn't work you can also contact: virus[at]avast.com

Title: Re: exe files generated by my program seen as false positive
Post by: a_catalin on December 27, 2011, 09:55:17 AM

I tried again and it seems like is working fine now...

Title: Re: exe files generated by my program seen as false positive
Post by: Asyn on December 27, 2011, 09:56:34 AM

Quote from: a_catalin on December 27, 2011, 09:55:17 AM

I tried again and it seems like is working fine now...

Good. :)