Cashfarm.org False-Positives Problem

[REDACTED]

Dear Avast team!

We have a false-positive problem with our newly developed software (Auto.IT scripts).

The download link to our free software (setup file) is here: http://download.cashfarm.org

A description of our software is here: http://www.cashfarm.org

Please refer to a virustotal analysis of our software:

https://www.virustotal.com/de/file/649321bd051bb4fbe46fbb8b46d198e22e1a92c7fbc8feeaeb30bb08d5b2d047/analysis/1404885687/

AutoIt: "Win32:AutoIt-BRZ [Trj]"

The problem results from the use of "Auto.It scripts" which we use to automate actions of the Internet Explorer. We researched everything but there is no other technology available, so we kindly ask you to check out our software and whitelist it. Or give us clear instructions on how to solve the problem.

Please consider the fact that our software is self-updating and might change every few weeks. There is no way we can avoid that, so whitelisting the current version of the software might not be enough, because of constant changes of the software.

Description of functionality: Our software is a kind of view/like/comment exchange system for Youtube and Vimeo. Every time the user runs the software, it connects to our central server to get actions (videos to view/like/comment) and these actions are executed on the users computer. For each action that is done the user earns a small amount of bitcoins that he can cashout after he reached 2$.


Thanks a lot,
M.

PS: I tried to reach the Avast Virus Lab and upload the file, but the upload constantly fails, maybe the filesize is too large.

[Asyn]

You can report a possible FP here: http://www.avast.com/contact-form.php

[Pondus]

if the option Asyn gave dont work, try one of these
you may want to give a link to this topic in case they reply here.....

You can use mail
send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
http://www.avast.com/en-eu/faq.php?article=AVKB21

[REDACTED]

You can report a possible FP here: http://www.avast.com/contact-form.php

We tried this at least 30 times. It seems that our EXE file is too large for the upload form.

[Asyn]

See Reply #2 from Pondus.

[REDACTED]

or you can send files from avast chest
http://www.avast.com/en-eu/faq.php?article=AVKB21

Did this and seem to work, but we are interested to solve the problem as soon as possible as we are concerned about our clients and reputation.

Thanks a lot,
M.