Author Topic: Another False Positive?  (Read 1894 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Another False Positive?
« on: February 18, 2015, 07:07:36 PM »
When trying to download jtuc's 64-bit fork of WinMerge 2011 directly from bitbucket, Avast reports a virus.

The URL is:
https://bitbucket.org/jtuc/winmerge2011/downloads

The file is:
https://bitbucket.org/jtuc/winmerge2011/downloads/WinMerge_2011.004.525_x64_change_7z_to_exe_if_you_want_a_setup.7z

When scanning the file in VirusTotal, it shows that the file is clean.  It even shows that Avast reports it as clean.

Why does Avast report a virus on the file when trying to download it, but VirusTotal shows that Avast finds no virus?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Another False Positive?
« Reply #1 on: February 18, 2015, 07:21:00 PM »
You left out some info ..... what does avast say?

I guess it is    Win32:Evo-Gen [susp] = Suspicious , a on access detection only and will not show in any scan

You can report it here   https://support.avast.com > avast virus lab

REDACTED

  • Guest
Re: Another False Positive?
« Reply #2 on: February 18, 2015, 07:34:13 PM »
Thanks.  I didn't write it down the first time, and now Avast has completely blocked all ability to access the URL in order to provide the information you requested.  See this forum post for a description of that problem: https://forum.avast.com/index.php?topic=166467.0

Thank you for your suggestion to report it via the Avast labs.  Knowing to report a false positive using that option was not obvious!  Thank you for providing the link.