Author Topic: False positive on compiled report file  (Read 20795 times)

0 Members and 1 Guest are viewing this topic.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #15 on: June 29, 2013, 05:01:54 AM »
again,seems solved
maybe there is something wrong with detection shield :(

I don't know.
maybe I got the wrong answer
in my view is a false positive.
If the samples was sent through the contact form it will be fixed.
« Last Edit: June 29, 2013, 05:09:51 AM by jefferson santiag »

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #16 on: June 29, 2013, 03:12:14 PM »
Yes It was sent couple days ago
thanks!

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #17 on: July 23, 2013, 02:17:03 PM »
same problem is back,
so,this is the file :  http://www.mediafire.com/download/u8zx21y12wcr508/report1.zip
scan it,nothing is found

try to copy/paste it to another location : NOW IS DETECTED :


ALSO SUBMITTED FROM AV INTERFACE

there is a virus total link :
https://www.virustotal.com/en/file/691bd502c27c5411d0d1e9c647341f437c8409e17628b56203f9a2de44ead752/analysis/1374583090/


« Last Edit: July 23, 2013, 02:40:37 PM by mrapi »

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: False positive on compiled report file
« Reply #18 on: July 23, 2013, 02:23:45 PM »
With the amount of (POSSIBLE) FP's you have. I'd say you are probably infected with something Avast cannot detect as of yet. That's too many.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #19 on: July 23, 2013, 02:32:04 PM »
Read one of my possible false positive:

http://forum.avast.com/index.php?topic=128209.msg957260#msg957260

There is the aswer :
Hello,
thanks for notice, it will be fixed in next stream update.

Milos


also Virus Total link: Detection ratio:    0 / 47


With the amount of (POSSIBLE) FP's you have. I'd say you are probably infected with something Avast cannot detect as of yet. That's too many.
« Last Edit: July 23, 2013, 02:41:35 PM by mrapi »

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #20 on: December 23, 2013, 09:30:31 AM »
From today problem is back with another compiled report file,check this file :
http://www.mediafire.com/download/t1vvv59w9vdb40k/lcf.zip

VT report:
https://www.virustotal.com/en/file/fe03261953102c1ccfb714b3af13cf642f70701f33bf13e80dba2412421d696f/analysis/1387787185/

on scan :not detected
on access:detected

also file sent to support via AV interface ans via  http://www.avast.com/contact-form.php

I use AV 2014.9.0.2011

Thanks!
« Last Edit: December 23, 2013, 09:33:59 AM by mrapi »

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: False positive on compiled report file
« Reply #21 on: December 23, 2013, 01:16:47 PM »
I'll upload it to malwr.com.

I am having issues with my PC lagging out since my HDD is being copied into a VHD format for my Virtual Machine, so I can't test it manually.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #22 on: December 26, 2013, 01:37:19 AM »
From today problem is back with another compiled report file,check this file :
http://www.mediafire.com/download/t1vvv59w9vdb40k/lcf.zip

VT report:
https://www.virustotal.com/en/file/fe03261953102c1ccfb714b3af13cf642f70701f33bf13e80dba2412421d696f/analysis/1387787185/

on scan :not detected
on access:detected

also file sent to support via AV interface ans via  http://www.avast.com/contact-form.php

I use AV 2014.9.0.2011

Thanks!

there was no response through the contact form
Reporting virus analyst

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #23 on: December 28, 2013, 01:22:25 PM »
I don't understand,you didn't received the file send by me?

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2296
Re: False positive on compiled report file
« Reply #24 on: December 30, 2013, 03:47:49 PM »
I don't understand,you didn't received the file send by me?
Yes, it should be fixed.

Milos

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #25 on: December 30, 2013, 08:06:16 PM »
Now it is fixed,thanks!

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #26 on: February 07, 2014, 08:08:52 AM »
The same problem is back again with update from this morning  :(
I sent file by there  http://www.avast.com/contact-form.php
also direct link : http://www.mediafire.com/download/8waer4m4a3fygz8/cartem.zip
thanks

kareld

  • Guest
Re: False positive on compiled report file
« Reply #27 on: February 07, 2014, 12:12:48 PM »
It should be fixed now.

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #28 on: February 07, 2014, 02:22:39 PM »
seems fixed,thanks!

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #29 on: February 11, 2014, 04:50:28 PM »
From today problem is back again,I reported the file using this link : http://www.avast.com/contact-form.php
also direct link :   http://www.mediafire.com/download/51eym2cxds4g205/jfur.zip

thanks.