Author Topic: False Positive?  (Read 2615 times)

0 Members and 1 Guest are viewing this topic.

a_cicovic

  • Guest
False Positive?
« on: December 19, 2005, 05:05:56 PM »
Hi.

Avast finds a Win32:Bancos-PH [Trj] in Microsoft's MetaEdit tool.

http://download.microsoft.com/download/iis50/Utility/5.0/NT45/EN-US/MtaEdt22.exe


Thanks...





Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89021
  • No support PMs thanks
Re: False Positive?
« Reply #1 on: December 19, 2005, 05:16:06 PM »
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a new, undetected virus or false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner

If it is indeed a false positive, add it to the exclusions lists and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: False Positive?
« Reply #2 on: December 19, 2005, 05:24:26 PM »
Dr. Web extension shows this file as being clean  8)
Seems a false positive. Anyway, Jotti would say it  :)
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89021
  • No support PMs thanks
Re: False Positive?
« Reply #3 on: December 19, 2005, 05:32:04 PM »
Certainly seems like it is a false positive.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

a_cicovic

  • Guest
Re: False Positive?
« Reply #4 on: December 19, 2005, 05:35:13 PM »
It should be a false positive as it happened after today's VPS update, it's a Microsoft utility (if that means anything  ;D), I have a very clean system, and the file has been around for a long time. :)

At any rate, I sent you an e-mail with everything requested.

Thanks...