Author Topic: IDP Generic Infection  (Read 124436 times)

0 Members and 1 Guest are viewing this topic.

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 308
Re: IDP Generic Infection
« Reply #30 on: February 24, 2017, 12:28:04 AM »
Are you saying that there were 31 other files with the same 'Gravis Marketing' digital signature in the database of files (so I was not the first one to report this ISP detection). As a result, you added all 32 files to the Cleanset so that detection will never be triggered on files signed by Gravis Marketing in the future?


Follow-up Questions:

-Did you mark my file upload as 'clean' before or after checking the database of files?

--Was my file added to the Cleanset before (or along with) the other 31 files signed by 'Gravis Marketing?

 

« Last Edit: February 24, 2017, 12:41:11 AM by Spiritual2016 »

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1130
Re: IDP Generic Infection
« Reply #31 on: February 24, 2017, 08:33:32 AM »
Are you saying that there were 31 other files with the same 'Gravis Marketing' digital signature in the database of files (so I was not the first one to report this ISP detection). As a result, you added all 32 files to the Cleanset so that detection will never be triggered on files signed by Gravis Marketing in the future?
Correct!

-Did you mark my file upload as 'clean' before or after checking the database of files?
After.

--Was my file added to the Cleanset before (or along with) the other 31 files signed by 'Gravis Marketing?
Along with.

Offline Spiritual2016

  • Sr. Member
  • ****
  • Posts: 308
Re: IDP Generic Infection
« Reply #32 on: February 24, 2017, 09:12:46 PM »
I understand now that my file and the 31 other files with the 'Gravis Marketing' digital signature were added to the 'Cleanset' and the digital signature itself was marked as clean but 'how' does my version of Avast 'know' not to detect this signature as a threat in the future?

Will it take effect the next time the virus definition is updated?





« Last Edit: February 25, 2017, 08:21:41 AM by Spiritual2016 »

Offline Mihàly

  • Newbie
  • *
  • Posts: 1
Re: IDP Generic Infection
« Reply #33 on: March 04, 2017, 06:05:09 AM »
Hello,
I also have a false positive detected as 'IDP.Generic.39515dfb2d8c.3.2' with 'Vole Media CHM' software.
I sent a report.
Thank

Offline marusialuk

  • Newbie
  • *
  • Posts: 1
Re: IDP Generic Infection
« Reply #34 on: April 16, 2017, 11:14:55 PM »
Hello,

I seem to have a similar problem with a navigation tracking tool I use for tracking my truck: Geo Navi.
I've been using this program since 2013 with no problems until my last update of the Avast software.

Now it detects it and blocks one of it's components: file named events handler.exe with the message reading IDP: Generic
I have uploaded the file to virustotal and here is the link to the analysis results:

https://www.virustotal.com/pl/file/6fc5b4da63a235ca743ea219360b2f426ffe17fc84fcc0021e34b013732873e4/analysis/1492376150/

Is it a false positive?

Or is the GeoNavi software bugged?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37029
Re: IDP Generic Infection
« Reply #35 on: April 16, 2017, 11:35:03 PM »
Hello,

I seem to have a similar problem with a navigation tracking tool I use for tracking my truck: Geo Navi.
I've been using this program since 2013 with no problems until my last update of the Avast software.

Now it detects it and blocks one of it's components: file named events handler.exe with the message reading IDP: Generic
I have uploaded the file to virustotal and here is the link to the analysis results:

https://www.virustotal.com/pl/file/6fc5b4da63a235ca743ea219360b2f426ffe17fc84fcc0021e34b013732873e4/analysis/1492376150/

Is it a false positive?

Or is the GeoNavi software bugged?
Report it  >>  https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438