False positive:System Information for Windows (SIW)

[Glowman]

This well respected software utility is currently being reported as malicious.
http://www.gtopala.net/download/siw-setup.exe

[Pondus]

not detected here   

http://www.metascan-online.com/results.cgi?uid=amroblqqfxiwtwl0tfm7cmdaztrtol44
http://virusscan.jotti.org/en/scanresult/97fce18d35ae2eae8b8bbd767812a42b38913630

[REDACTED]

http://www.virustotal.com/url-scan/report.html?id=dbcd30145fc76f4d8b78169f01d2cdc2-1319914357

URL:Mal

TrendMicro   Malware site

http://whois.domaintools.com/199.27.135.88

[DavidR]

It isn't blocking the siw-setup.exe as such it is blocking the site, see images.

EDIT:
There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, enter the web URL for the site you wish to submit for Network Shield review, etc. A link to this topic also wouldn't hurt.

[meesdroo]

Today I got SIW halted at it's website :
http://www.gtopala.net/download/siw-setup.exe
too! Seeing that this issue is running since April 2008, my question is:
How seriously can we take the Avast product support and hence the Avast product as a whole?
I already had to dump McAfee and Norman for destroying vital parts of the operating system; will Avast be the next?
By the way, I sent in a ticket to notify them for the false positive; I hope I was wrong concluding that nothing happens and that they just fail to monitor their forums.
Mees de Roo

[Pondus]

@meesdroo
If You are going to dump your AV every time something goes wrong.......Then You Will Soon have a long list of AV tested....
If you Check the vendors support forums you will see that none are problem free

[DavidR]

@ meesdroo
I don't know where you get that this has been going on since April 2008 (as you don't say) and this topic was first created on 29 October 2011.

There are many reasons why a site may end up being blocked if it had a recent hacking attack could result in avast's web shield alerting on the site; this could result in it being added to the network shield malicious sites list. So it is possible over time for a site to end up being blocked more than once.

[Sirmer]

Hello,
it will be unblock in next virus definition update.
Regards,
Jan

[meesdroo]

Well I must say that I am very pleasently surprised!
I sent in this false positive by the usual channels too, and I got immediate replies and the promise for repair and by loo, it was repaired asap!
That is what I expect from an anti-virus company and thats what I obviously got.
So keep up the good work and I will keep using and promoting your product.
And apologies if I sounded a bit negative to start with. I just got my share from sales oriented non-valeurs whem this hickup crossed my path... :'(
Mees de Roo