Author Topic: This is a false +ve...  (Read 6386 times)

0 Members and 1 Guest are viewing this topic.

Harikrishnan

  • Guest
This is a false +ve...
« on: February 21, 2013, 08:45:14 AM »
I think this is a false positive....(Virus Data Base : 130220-1)
Virus Total result: 10/46

« Last Edit: February 21, 2013, 09:48:13 AM by Harikrishnan »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: This is a false +ve...
« Reply #1 on: February 21, 2013, 10:25:46 AM »
Hello,
send us (virus@avast.com) the file to analyze, please.

Milos

Harikrishnan

  • Guest
Re: This is a false +ve...
« Reply #2 on: February 21, 2013, 12:03:42 PM »
Where and how to upload the suspected file....???

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: This is a false +ve...
« Reply #3 on: February 21, 2013, 12:44:45 PM »
Where and how to upload the suspected file....???

Milos already told you where to send it. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Harikrishnan

  • Guest
Re: This is a false +ve...
« Reply #4 on: February 21, 2013, 01:03:14 PM »
But virus@avast.com directs me to avast.com and i can't find an option to upload the file..!!!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: This is a false +ve...
« Reply #5 on: February 21, 2013, 01:07:33 PM »
But virus@avast.com directs me to avast.com and i can't find an option to upload the file..!!!

??? That's an Email address..!! ;)
But you can also report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: This is a false +ve...
« Reply #6 on: February 21, 2013, 01:10:33 PM »
Where and how to upload the suspected file....???

Within Chest (Quarantine)? Right click it and choose the proper option.
The best things in life are free.

Harikrishnan

  • Guest
Re: This is a false +ve...
« Reply #7 on: February 21, 2013, 01:26:56 PM »
But Gmail doesn't allow me to upload that .exe file and I can't move it to chest...!!!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: This is a false +ve...
« Reply #8 on: February 21, 2013, 01:35:14 PM »
But Gmail doesn't allow me to upload that .exe file and I can't move it to chest...!!!

You can also report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: This is a false +ve...
« Reply #9 on: February 21, 2013, 01:42:41 PM »
Re: http://systemexplorer.net/file-database/file/oflpdemo-exe/17273794
But I would not trust any torrent downloads of it...

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

spywar

  • Guest
Re: This is a false +ve...
« Reply #10 on: February 21, 2013, 05:46:00 PM »
But Gmail doesn't allow me to upload that .exe file and I can't move it to chest...!!!
Compress the sample (.rar not .zip) then put a password "infected" and resubmit it from Gmail, that works.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: This is a false +ve...
« Reply #11 on: February 21, 2013, 05:51:20 PM »
But Gmail doesn't allow me to upload that .exe file and I can't move it to chest...!!!
Compress the sample (.rar not .zip) then put a password "infected" and resubmit it from Gmail, that works.
or 7zip.....
you need to use a zip program that encrypt the content, so that gmail will not be able to see that it contain a .exe file
« Last Edit: February 21, 2013, 05:53:20 PM by Pondus »

spywar

  • Guest
Re: This is a false +ve...
« Reply #12 on: February 21, 2013, 06:09:14 PM »
But Gmail doesn't allow me to upload that .exe file and I can't move it to chest...!!!
Compress the sample (.rar not .zip) then put a password "infected" and resubmit it from Gmail, that works.
or 7zip.....
you need to use a zip program that encrypt the content, so that gmail will not be able to see that it contain a .exe file
Yes but not in ".zip" you need to compress things in ".rar" otherwise it does not work ..

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: This is a false +ve...
« Reply #13 on: February 21, 2013, 06:20:34 PM »
7zip does not compress in rar....default is....7zip

Supported packing / unpacking formats: 7z, ZIP, GZIP, BZIP2 and TAR
Strong AES-256 encryption in 7z and ZIP formats


http://filehippo.com/download_7zip_32/

spywar

  • Guest
Re: This is a false +ve...
« Reply #14 on: February 21, 2013, 06:34:28 PM »
7zip does not compress in rar....default is....7zip

Supported packing / unpacking formats: 7z, ZIP, GZIP, BZIP2 and TAR
Strong AES-256 encryption in 7z and ZIP formats


http://filehippo.com/download_7zip_32/
Then he should use WinRar (I'm just saying this to him to be able to submit samples from Gmail (.exe)).