« previous next »
Pages: [1] 2   Go Down

Author Topic: False Positive  (Read 13679 times)

0 Members and 1 Guest are viewing this topic.

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
False Positive
« on: December 13, 2003, 08:50:13 AM »
Ok guys I know Panda active scan has that problem with the deffinition files being detected as infected but F-Secure? I have the full F-secure antivirus 2004 package on my HD and it turns infected with Win32:Naith-C [Wrm]  :'(
Housecall Does Not find this
the RAV online scan does not find this
Bitdefender online scan does not find this
« Last Edit: December 13, 2003, 08:50:28 AM by MacLover2000 »
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:False Positive
« Reply #1 on: December 13, 2003, 09:27:00 AM »
I think it is the CLRAV cleaner from KAV(F-secre) it is a known issue.
Logged
MfG Ralf

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #2 on: December 13, 2003, 02:00:48 PM »
ok I did some more work and found that the old F-Secure antivirus 2003
is not infected.
F-Secure Antivirus 2003 is the home version of 5.41
F-Secure Antivirus 2004 is the home version of 5.51
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #3 on: December 13, 2003, 02:02:57 PM »
Quote
I think it is the CLRAV cleaner from KAV(F-secre) it is a known issue.

in the new version the F-Prot engine is replaced with Libria
is this new engine the cause
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:False Positive
« Reply #4 on: December 13, 2003, 02:14:34 PM »
Do you have that package installed on your PC and does Avast reports any file as infected.
Logged
MfG Ralf

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #5 on: December 13, 2003, 04:16:41 PM »
i have the package installed ( with the real time scanning OFF)
 only the install package is infected
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Waldo

  • Guest
Re:False Positive
« Reply #6 on: December 13, 2003, 07:09:54 PM »
Maclover2000,

Remind that it's always better to have a false positive, than a false negative ;D

(just joking).

Waldo
Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #7 on: December 13, 2003, 07:29:15 PM »
I know. But if you try to download the eval and unlock it it gives you the 2003 version so I would like to keep it on my hard drive as backup without that false positive. and it cant be emailed to ALWIL because its 30MB! :o
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #8 on: December 14, 2003, 05:07:52 PM »
another scan this morning and still says infected  >:(
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #9 on: December 14, 2003, 05:20:41 PM »
here is screenshot
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

kareld

  • Guest
Re:False Positive
« Reply #10 on: December 15, 2003, 02:19:32 PM »
Hi MacLover2000,
  it's the same case as with the Panda. In the program is a part of the Naith-C.  :( Try put the file to the Avast's scanning exceptions list in order to stop get alarms on it.
Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #11 on: December 15, 2003, 09:24:10 PM »
i have added it to the list and the fals alarm is gone thank you
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #12 on: December 21, 2003, 01:05:12 AM »
in the latest iAVS update all false positives with F-Secure were fixed  :D ;D
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Pavel Baudis

  • Guest
Re:False Positive
« Reply #13 on: December 21, 2003, 09:10:10 AM »
Quote from: MacLover2000 on December 21, 2003, 01:05:12 AM
in the latest iAVS update all false positives with F-Secure were fixed  :D ;D

Yep! F-Secure contacted us and explained that part of the unecrypted virus code is there by mistake and it will be removed asap. But they have already huge amount of CDs distributed and we were not the only one to detect this.

We appreciate this (everybody can make a mistake) and corrected the FP. Unlike Panda, which has part of at least 20 viruses - and they do nothing about it...

Pavel
Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:False Positive
« Reply #14 on: December 21, 2003, 04:15:06 PM »
thank you  
F-secure is my Backup scanner of corse
Logged
"People who are really serious about software should make their own hardware." - Alan Kay
Pages: [1] 2   Go Up
« previous next »