Author Topic: False positive on compiled report file  (Read 21422 times)

0 Members and 1 Guest are viewing this topic.

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2297
Re: False positive on compiled report file
« Reply #30 on: February 12, 2014, 09:41:43 AM »
From today problem is back again,I reported the file using this link : http://www.avast.com/contact-form.php
also direct link :   http://www.mediafire.com/download/51eym2cxds4g205/jfur.zip

thanks.
Hello,
it will be fixed in next stream update.

Milos

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #31 on: February 12, 2014, 10:38:19 AM »
thanks Milos !

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #32 on: March 17, 2014, 07:40:57 AM »
Problem is back with another file,also sent using submission page
direct link :  http://www.mediafire.com/download/w66r8qmqrgt277r/lip.zip
thanks

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #33 on: March 17, 2014, 09:08:58 PM »
after last update probelm moved from previous file to another one,I submitted now that file
 :(
also direct link there:  http://www.mediafire.com/download/779p4n0q908pq55/rstoc1.zip

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #34 on: March 17, 2014, 09:55:51 PM »
Problem is back with another file,also sent using submission page
direct link :  http://www.mediafire.com/download/w66r8qmqrgt277r/lip.zip
thanks

this first this no longer being Blocked
was been fixed.

after last update probelm moved from previous file to another one,I submitted now that file
 :(
also direct link there:  http://www.mediafire.com/download/779p4n0q908pq55/rstoc1.zip

 will try to ,wait.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #35 on: March 17, 2014, 10:21:16 PM »
after last update probelm moved from previous file to another one,I submitted now that file
 :(
also direct link there:  http://www.mediafire.com/download/779p4n0q908pq55/rstoc1.zip

Should be fixed now by stream update.

Thanks Milos.

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #36 on: March 18, 2014, 08:29:13 AM »
now seems solved,thanks!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #37 on: March 19, 2014, 04:04:02 AM »
now seems solved,thanks!

Do not thank me
without the work of the avast team
would not the same thing.

Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #38 on: May 06, 2014, 04:59:51 PM »
 :(  Now false detection moved to main application,file sent using av interface and using web page
 
also direct link :  http://www.mediafire.com/download/04imtb64u89adjg/gs.zip

VT : Detection ratio:    0 / 47
https://www.virustotal.com/en/file/2d4ac6d10c50dbce6cef20ce3c3327a7c6dec88436721da911c5633b2d906f18/analysis/1399388207/
« Last Edit: May 06, 2014, 05:03:32 PM by mrapi »


Offline mrapi

  • Full Member
  • ***
  • Posts: 137
Re: False positive on compiled report file
« Reply #40 on: May 07, 2014, 08:30:03 AM »
Hi !
Indeed now is not detected.
file is build with VB.NET 2008 and obfuscated,to be run needs couple dependencies
it is a part of a stock management software,original name is gestiune.exe,I've renamed
I don't think this file is a historic malicious

thanks!
« Last Edit: May 07, 2014, 08:31:50 AM by mrapi »


Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer

REDACTED

  • Guest
Re: False positive on compiled report file
« Reply #43 on: July 04, 2014, 10:21:02 AM »
I've got it (again) to

This time in AUTORUNX

Did the same as it did before. If I scan it inside the chest, it then says it's in avast temp to. I assume this is a FP again? Clean all on other scans, and Tdsskiller.

https://www.virustotal.com/en-gb/file/a1eeeb808718f3a68f03ce5dfe8cdafea90e6caa2a50cdcf5e88381a7e4eea86/analysis/

« Last Edit: July 04, 2014, 10:24:09 AM by FalseTime »

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: False positive on compiled report file
« Reply #44 on: July 04, 2014, 09:57:17 PM »
This time in AUTORUNX

Did the same as it did before. If I scan it inside the chest, it then says it's in avast temp to. I assume this is a FP again? Clean all on other scans, and Tdsskiller.

https://www.virustotal.com/en-gb/file/a1eeeb808718f3a68f03ce5dfe8cdafea90e6caa2a50cdcf5e88381a7e4eea86/analysis/

hello

send the file to virus@avast.com and put "false positive" in the subject line in zip or rar format
you have the (avast temp) temporary file name varies depending on the system and your version of avast is also possible to fix through them, can forward

use http://www.avast.com/contact-form.php

then submit the support ticket and attach the file

https://support.avast.com/Tickets/Submit