Author Topic: False positive on two files detected as FileRepMalware  (Read 10730 times)

0 Members and 1 Guest are viewing this topic.

Offline gisot1

  • Newbie
  • *
  • Posts: 12
False positive on two files detected as FileRepMalware
« on: March 04, 2016, 01:50:03 AM »
Avast detects two files(which are 50mb and 71mb in size) as FileRepMalware, but when I scan both files on Virustotal, they both come clean, even with latest Avast database.
Here are Virustotal results: https://www.virustotal.com/en/file/7fdf11b1964ac7a5ff47b3eeed6e9e6f4a94a638eed8db55ba7c8e9a99a90f15/analysis/1457051596/
and second file link:https://www.virustotal.com/en/file/a837ed7a2edd526096e85ffd4ba1ecd150e803f2b372e83adafcb4d82d3af60d/analysis/1457050912/
Thanks

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31073
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: False positive on two files detected as FileRepMalware
« Reply #1 on: March 04, 2016, 08:15:22 AM »
FileRepMalware :

It blocks files downloads if these conditions are *all* met:
1. The file is not prevalent enough, ie. not enough Avast users tried to launch the file yet,
2. The file is not signed or Avast does not trust the signature.
3. The file was not added to our cleanset.

For DomainRepMalware there is also this :
4. The domain is not prevalent enough, ie. not enough Avast users tried to download (any) files from the domain yet,
« Last Edit: March 10, 2016, 02:12:29 PM by Eddy »

Offline denics

  • Avast team
  • Full Member
  • *
  • Posts: 168
    • avast!
Re: False positive on two files detected as FileRepMalware
« Reply #2 on: March 04, 2016, 12:44:45 PM »
Hi all! This indeed is a false positive. It should be fixed in the next virus database update or streaming update.

Thank you for reporting and sorry for the inconvenience!
Denis Konopiský - avast! VirusLab | Android & Windows Malware | VPS Operations | Whitelisting

Offline gisot1

  • Newbie
  • *
  • Posts: 12
Re: False positive on two files detected as FileRepMalware
« Reply #3 on: March 04, 2016, 09:36:24 PM »
@Eddy , thank you for the helpful info
@denics , latest database update fixed this FP, thanks.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31073
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: False positive on two files detected as FileRepMalware
« Reply #4 on: March 04, 2016, 09:48:32 PM »
You're welcome.