Author Topic: False Positive?  (Read 2206 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
False Positive?
« on: July 18, 2014, 04:08:15 PM »
This morning Avast warned me that my DCService.exe might be infected by Win32:Evo-gen. I uploaded and scanned it on Virustotal and they said the detection ratio was 0/51. Is this a false positive?

Here is Virustotal link:
https://www.virustotal.com/en/file/110113372f080e5bfd740c06f30dea0b75996b126899f22f0d33c85d3dce97d6/analysis/1405690803/

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: False Positive?
« Reply #1 on: July 18, 2014, 04:10:44 PM »
yepp     First submission 2011-02-05 13:13:35 UTC ( 3 years, 5 months ago )

Win32:Evo-gen [susp] = suspicious / a on access detection only so will not show on VT or when scanning

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: False Positive?
« Reply #2 on: July 18, 2014, 04:11:43 PM »
You can report it using one of these options......you may add a link to this topic in case they reply here


You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
how to use the chest.    http://www.avast.com/faq.php?article=AVKB21


Offline LesF

  • Jr. Member
  • **
  • Posts: 26
Re: False Positive?
« Reply #3 on: July 22, 2014, 02:12:47 PM »
What am I supposed to do about this?  When I build my C# app Avast reports win32:evo-gen in the .exe and deletes it.
I set it to exclude my project directory and built the .exe, but now Avast is blocking my creation of an installer which includes the .exe, so I cannot get a serious bug-fix release out.  If I set Avast to exclude the installer creation files, I could create the installer, but I cannot put this online for people to use if Avast is throwing up alerts about it.

This sucks.  I need to get this software release out.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: False Positive?
« Reply #4 on: July 22, 2014, 02:53:18 PM »
Quote
What am I supposed to do about this?
report it using one of the options given above.....


Offline LesF

  • Jr. Member
  • **
  • Posts: 26
Re: False Positive?
« Reply #5 on: July 22, 2014, 03:11:56 PM »
Thats just strange.  By commenting out a couple of lines of code, I can build my C# app and Avast is ok with it.
Unfortunately I really wanted those lines in there - just a minimum height check on a Windows control on my form.
Anyways, have posted a copy of the file with a false positive report.