False Positive

[crofty59]

Hi

I am getting a false positive for  CEDP Stealer 3.5

I am being told i have Win32- Adware - gen [Adw]  in the uninstaller

My daughter has had this program for over 1 year.

Checked with Virus Total on-line scan Avast only one showing any infections.
I tried to send a sample to Avast, but i couldn't get it to go.

Would appreciate if someone could show me how to do it right.

Cheers

[DavidR]

You coulkd also try Jotti.

Also see (Mini Sticky) False Positives

I tried to send a sample to Avast, but i couldn't get it to go.

How did you try to send and what were the problems/errors ?

[Lisandro]

I tried to send a sample to Avast, but i couldn't get it to go.

How did you try this?

1. You can send an email with the file (false positive or infected) to: virus@avast.com You can zip and password the files... Inform a link to this thread and the password used.

2. You can send the files to Chest and, from there, resend to Alwil for analysis.

3. You can use Alwil FTP server as a second way to transfer only big files. Upload them to ftp://ftp.avast.com/incoming (please, note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

Thanks.

[crofty59]

Hi

I tried to put in zip folder but it went through the process, but the zip folder contained no info.

I ended up sending an email by using the chest.

Cheers

[Lisandro]

I tried to put in zip folder but it went through the process, but the zip folder contained no info.

Did you disable the Standard Shield to do that?
If avast is detecting a 'false positive' it won't allow you to add this 'infected' file to a zip... 

[crofty59]

Did you disable the Standard Shield to do that?
If avast is detecting a 'false positive' it won't allow you to add this 'infected' file to a zip... 

Hi Tech

No i didn't, next time i will try that.
Thanks a million.

Cheers

[crofty59]

Disappointed

Have now sent 2 emails to Alwil  this way. I have the file to Chest and, from there, i have resent  it to Alwil for analysis.

I also added comments and placed my email address to make sure Alwil had it.
So far no reply and there has been 5 virus definitions updates.

To stop getting the virus warning i have placed the file in exclude (Hoping nothing does infest this file.

Cheers

[DavidR]

Generally avast won't contact you unless they require any more information.

If Virus Total and Jotti are showing only avast detecting this then I think you have little to fear, considering you have been using/had this program for over a year.

Did you put False Positive in the emails Subject as this may separate it from the other 3999 emails that avast receive at virus @ avast.com per day. You would need to do that after the email is in your outbox as I don't think you can change it from the chest process of compiling the email info.

[crofty59]

Hi DavidR

Thanks for your reply, and valuable input.

Today it doesn't show up as a virus.

I'm a Happy Camper again.

Cheers