Author Topic: False Positive  (Read 3135 times)

0 Members and 2 Guests are viewing this topic.

Umpa

  • Guest
False Positive
« on: March 28, 2006, 12:15:44 AM »
At first I was impressed with this prg, now after a scan 'im not sure.

I have found 6 virus/worm, that other virus scanners say are ok, and I have been using these programs for ages.

My first guess is false positive, which is the worst kind of all.

Does this program have issues like this ?


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: False Positive
« Reply #1 on: March 28, 2006, 12:43:26 AM »
I have found 6 virus/worm, that other virus scanners say are ok, and I have been using these programs for ages.
Which one? Some of them have notorious lower detection than avast. Sometimes avast caught a lot of false positives...

To know if a file is a false positive, please submit it to JOTTI and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used.
The best things in life are free.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: False Positive
« Reply #2 on: March 28, 2006, 12:56:53 AM »
Hi Umpa,

There can be quite another reason for this, and then you cannot blame it on the avast program. Some users think that two resident scanners are better than one. A grievous mistake, they are finding each others signatures up as false positives. Some online scanners also interfere with resident scanners. If you have FPs through this you now know where it came from.
In the way of false positives: every scanner has them once in a while, none excluded, but heuristic scanners flag more. Avast is not a heuristic scanner. 6 FP's in one sweep, obvious this must be something else causing this.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89670
  • No support PMs thanks
Re: False Positive
« Reply #3 on: March 28, 2006, 01:07:10 AM »
What would also help in determining if they are False Positives is the virus name, infected file name and path, example (C:\windows\system32\infected-file-name.xxx)?

If these detections related to programs or files that had been on your system and had previously been scanned by avast (which is likely not to be the case if this was your first scan), then it could possibly be a false positive or a new previously undetected virus. As Tech said using Jotti is the best ad probably the quickest way to determine this.

I found viruses that had lived happily on my system undetected by my previous AV on the first scan after installation.

All AVs can have issues with false positives (some more that others) and avast is no different in that respect, that is why it is best to send files to the virus chest and investigate, 'first do no harm.'

If you have sent them to the chest you would need to move them out to a temp location otherwise they can't be uploaded from the chest.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

CharleyO

  • Guest
Re: False Positive
« Reply #4 on: March 29, 2006, 12:53:31 AM »
***

Yes, it always helps to give specific information when seeking help or making comments. Vague generalities helps no one.


***