Author Topic: False Positive? 3db38257-1a6c485b  (Read 3663 times)

0 Members and 1 Guest are viewing this topic.

Ragamuffin

  • Guest
False Positive? 3db38257-1a6c485b
« on: September 13, 2012, 05:46:29 PM »
Just had this file flag up in the latest updates as Other:Malware-gen [trj], was found in C:/users/admin/appdata/locallow/sun/java/deployment/systemchache/6.0/23 Virustotal is flagging it a couple times (https://www.virustotal.com/file/ff1dfa8bff6c5f52ec0436c94cb904193b2406b1f06fab4a301ceb4235e87d4d/analysis/1347550525/), I've tried to attach a zip of the file, but it's over the file size limit.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: False Positive? 3db38257-1a6c485b
« Reply #1 on: September 13, 2012, 07:34:29 PM »
not necessary to upload it here....
if you have the file in chest, right click it and upload it to avast lab as false positive
if not you can add it to chest manually ...it will be a copy af the file




First seen by VirusTotal
 2010-05-28 11:45:40 UTC ( 2 year, 3 months ago )


« Last Edit: September 13, 2012, 08:05:27 PM by Pondus »

Mysterio

  • Guest
Re: False Positive? 3db38257-1a6c485b
« Reply #2 on: September 14, 2012, 05:33:08 PM »
I have a similar problem. Yesterday avast was updated and it detected a similar file as a threat.
 
c\documents and settings\myname\application data\sun\javba deployment\cache\6.0\3db32857-56998e71

Avast labels many files or webs as threats and some of them were false positives (including yahoo, once). I would like to know if this file is a false positive.

Ragamuffin

  • Guest
Re: False Positive? 3db38257-1a6c485b
« Reply #3 on: September 14, 2012, 07:10:55 PM »
Files still coming up in the latest updates (120914-0), submitted it to the virus lab last night.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: False Positive? 3db38257-1a6c485b
« Reply #4 on: September 14, 2012, 07:15:47 PM »
I have a similar problem. Yesterday avast was updated and it detected a similar file as a threat.
 
c\documents and settings\myname\application data\sun\javba deployment\cache\6.0\3db32857-56998e71

Avast labels many files or webs as threats and some of them were false positives (including yahoo, once). I would like to know if this file is a false positive.
test suspicious files at virus total

what name did avast give .... was it a java exploit
anyway it seems to be located in java cache...just clear java cach
you also seem to have java 6 ...latest is 7    http://www.java.com/en/download/index.jsp


« Last Edit: September 14, 2012, 07:23:54 PM by Pondus »