how do I report a false positive

[jay21317]

So during daily scan today avast picked up tibia.exe as win32  genmalware.

I know its a false postive.

[Lord_Ami]

https://www.avast.com/en-us/contact-us.php?subject=VIRUS-FILE

[jay21317]

THANK YOU! also do you know where avast stores its scan logs,

[jay21317]

I installed the game onto another computer taht uses avast, and scanned the file and nothing came up. says its clean,

[Pondus]

how do I report a false positive

you can also report from avast chest    https://www.avast.com/en-us/faq.php?article=AVKB21#artTitle

the support link posted by avast team lately is this   https://support.avast.com/


upload suspicious file(s) and test here  www.virustotal.com / www.metascan-online.com

[jay21317]

https://www.virustotal.com/en/file/46191700867ce54d8081674e2e1afa02633a08f87e43689a056eff3ebe0c4b3b/analysis/


I don't know how to read that

[jay21317]

I ran the games uninstaller, and redownloaded the games client, and reinstalled it and now its not being picked up.


I think the file thats being detected is an older version of the program.


https://www.virustotal.com/en/file/91a7e8837f03c376e2a34072f47141d3feb9951bf7516155d06414fec09b84f7/analysis/

new analysis with the newer installed version.

[Pondus]

the scan is 3 days old .... was that you?    Analysis date:   2014-12-18 13:21:57 UTC ( 3 days, 7 hours ago )

if not always click rescan button for a fresh result if you see it been scanned before
First submission 2014-12-10 12:15:56 UTC ( 1 week, 4 days ago )   so a new file, maybe correct ..... what does a fresh scan say?



file detail ..... do you know this info?

CopyrightCopyright (C) CipSoft GmbH 2002-2014
Publisher CipSoft GmbH
Product Tibia Player
Original name Player.exe
Internal name Player.exe
File version 10.7.0.0
Description Tibia Player
Comments Tibia is a massively multiplayer online roleplaying game. Enter a medieval fantasy scenery, meet players from all over the world and have adventures together with them.

[jay21317]

scanning the new install comes up clean, the old  file still gets detected, and no that old scan wasn't me. not sure what I am doing with virus total, rescanning the file.

[jay21317]

https://www.virustotal.com/en/file/46191700867ce54d8081674e2e1afa02633a08f87e43689a056eff3ebe0c4b3b/analysis/1419194012/

[Pondus]

seems it have some behavior AV dont like .... send it to avast lab   

[jay21317]

Already sent it, do you know if they will email me back. about this or not. also, do you have any idea how to clear up avast scan logs, I really don't like seeing virus found in it,

[Para-Noid]

Report locations (Win7)...c:\programdata\avast software\avast\report

Bob made a video about creating a shorcut to the avast reports https://forum.avast.com/index.php?topic=93544.msg1143262#msg1143262
You will find the video here http://www.youtube.com/watch?v=ntW8zGicUfk&feature=youtu.be

Thanks to Bob I now have a desktop shortcut and have for quite some time. 
I have found it useful several times.

edit: additional

[jay21317]

Report locations (Win7)...c:\programdata\avast software\avast\report

Bob made a video about creating a shorcut to the avast reports https://forum.avast.com/index.php?topic=93544.msg1143262#msg1143262
You will find the video here http://www.youtube.com/watch?v=ntW8zGicUfk&feature=youtu.be

Thanks to Bob I now have a desktop shortcut and have for quite some time. 
I have found it useful several times.

edit: additional

thanks but that only leads to the shield logs, I mean the actual scan logs.

[jay21317]

I did a bit more digging into the tibia forums and there are a couple of threads reporting this issue, going back a week ago. seems it was the older program version I had that was being detected.