Author Topic: Avast detects 7zip.exe as virus  (Read 10667 times)

0 Members and 1 Guest are viewing this topic.

exodius

  • Guest
Avast detects 7zip.exe as virus
« on: December 02, 2013, 05:41:08 AM »
Hi,
7zip.exe detected as virus by avast. 7zip.exe is clean and trusted, why avast detects it as malware? I download it from here http://dl.7-zip.org/7z932.exe
Sample file: http://www.datafilehost.com/d/29bda322

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37644
  • F-Secure user
Re: Avast detects 7zip.exe as virus
« Reply #1 on: December 02, 2013, 05:44:45 AM »
have you tested the file(s) at www.virustotal.com / www.metascan-online.com / www.jotti.org




You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
how to use the chest.    http://www.avast.com/faq.php?article=AVKB21






Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Avast detects 7zip.exe as virus
« Reply #3 on: December 02, 2013, 12:46:42 PM »
Strange, no warnings with my 7zip x64 here...
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Avast detects 7zip.exe as virus
« Reply #4 on: December 02, 2013, 01:28:42 PM »
I have reported it.

Looks like avast doesn't like the setup file for some reason |>$INSTDIR\ and subsequently 7z.exe. Now is it the $INSTDIR\ it doesn't like or 7z.exe which hasn't alerted on my system.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Avast detects 7zip.exe as virus
« Reply #5 on: December 02, 2013, 02:07:25 PM »
Thanks David.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Avast detects 7zip.exe as virus
« Reply #6 on: December 02, 2013, 03:57:04 PM »
Hopefully they will pick up on it as I reported it as a website alert with the link to the hXXp://dl.7-zip.org/7z932.exe file and a link back to this topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Tetsuo

  • Guest
Re: Avast detects 7zip.exe as virus
« Reply #7 on: December 02, 2013, 04:12:34 PM »
Days ago, after examining the file via DeepScreen, Avast automatically put an exception for C:\(...)\7-Zip\7zG.exe in the DeepScreen exclusion list.
OS is Win XP Pro SP3.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Avast detects 7zip.exe as virus
« Reply #8 on: December 02, 2013, 04:26:22 PM »
Web Shield scans don't incorporate the DeepScreen (which would put a heavy load on the system), also the file the web shield is alerting on within the installation file is 7z.exe.

Original alert:
02/12/2013 12:12:35   hXXp://dl.7-zip.org/7z932.exe|>$INSTDIR\7z.exe [L] Win32:Evo-gen [Susp] (0)

During subsequent scanning in the partial download file in the temp folder it found.
02/12/2013 12:20:14   C:\Documents and Settings\UserName\Local Settings\Temp\aw0b0noL.exe.part|>$INSTDIR\7z.exe [L] Win32:Evo-gen [Susp] (0)
02/12/2013 12:20:46   C:\Documents and Settings\UserName\Local Settings\Temp\aw0b0noL.exe.part|>$INSTDIR\7z.sfx [L] Win32:Evo-gen [Susp] (0)
« Last Edit: December 02, 2013, 04:27:59 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast detects 7zip.exe as virus
« Reply #9 on: December 02, 2013, 04:44:18 PM »
The 9.3 version is still alpha. Could be it is solved in the final release of zip.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Avast detects 7zip.exe as virus
« Reply #10 on: December 02, 2013, 04:56:36 PM »
Just got an email response to my report:
Quote
Dear Customer,
Thank you for your e-mail and for using avast! as your antivirus solution.
Our virus specialists have been working on the problem and it's already fixed.
If I can be of further help in this matter, please do not hesitate to get in touch with me.

Regards,

Hopefully this will appear in a streaming update of the next VPS update.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Tetsuo

  • Guest
Re: Avast detects 7zip.exe as virus
« Reply #11 on: December 02, 2013, 04:58:18 PM »
Just to avoid any possible confusion, I was talking about 7-Zip 9.20, the stable version.
« Last Edit: December 02, 2013, 07:41:24 PM by Tetsuo »