Author Topic: A false positive has been found here  (Read 1872 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
A false positive has been found here
« on: April 22, 2018, 08:19:25 PM »
Hello everyone.

Everyday, Avast will do a quick scan on my computer.
Today, it found a Malware: The uninstaller of Notepad++
I think this is a false-positive, since it has been always here in my computer

Here is the Virus Total link: https://www.virustotal.com/#/file/4040b888d4a9a7dcd276839a10deccdd6b56e7e744a1fec25c248f2e4aa7947d/detection

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: A false positive has been found here
« Reply #1 on: April 22, 2018, 09:12:06 PM »
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: A false positive has been found here
« Reply #2 on: April 22, 2018, 09:18:29 PM »
Hello everyone.

Everyday, Avast will do a quick scan on my computer.
Today, it found a Malware: The uninstaller of Notepad++
I think this is a false-positive, since it has been always here in my computer

Here is the Virus Total link: https://www.virustotal.com/#/file/4040b888d4a9a7dcd276839a10deccdd6b56e7e744a1fec25c248f2e4aa7947d/detection

If you are talking about an on-demand scan, avast doesn't do a quick scan on your computer everyday unless you schedule it. 

Is that what you are doing ?
If not can you expand on what scan this is,  a screenshot of the detect could have helped.

Many uninstall functions because of their function the removal of components, registry entries, etc.  These can be mistaken for malicious actions. The Win32:Malware-gen is a generic '-gen' detection, one that is designed to catch multiple variants of piece of malware.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: A false positive has been found here
« Reply #3 on: April 22, 2018, 09:39:55 PM »
Hello everyone.

Everyday, Avast will do a quick scan on my computer.
Today, it found a Malware: The uninstaller of Notepad++
I think this is a false-positive, since it has been always here in my computer

Here is the Virus Total link: https://www.virustotal.com/#/file/4040b888d4a9a7dcd276839a10deccdd6b56e7e744a1fec25c248f2e4aa7947d/detection

If you are talking about an on-demand scan, avast doesn't do a quick scan on your computer everyday unless you schedule it. 

Is that what you are doing ?
If not can you expand on what scan this is,  a screenshot of the detect could have helped.

Many uninstall functions because of their function the removal of components, registry entries, etc.  These can be mistaken for malicious actions. The Win32:Malware-gen is a generic '-gen' detection, one that is designed to catch multiple variants of piece of malware.

I did scheduled it. Everyday at 15:00.
Yeah. it's a generic detection, but still a false positive, so that's why I created a thread for it.

I also just sent to Avast the file to check for false positive.
« Last Edit: April 22, 2018, 09:43:23 PM by Nori-chan »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: A false positive has been found here
« Reply #4 on: April 22, 2018, 10:39:36 PM »
1. when there is a detection, what actions do you have avast take ?
If you allow antonymous action, you have no control over what action to take.  I would suggest you change your scan settings, see attached image and check that box to see other actions you want to take.  For me that would be No Action, on completion of the scan you should be able to determine what actual action you want to take.

2.  Personally I feel that on-demand scans are much depreciated.
- With a resident (on-access) scanner the need for on-demand scans is much depreciated. For the most part dormant/inert files are being scanned, the other active files are going to be scanned by the resident shields when they are activated.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48551
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: A false positive has been found here
« Reply #5 on: April 22, 2018, 10:42:10 PM »
I can't remember the last time I've actually run a scan outside of setting it up for a demonstration.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: A false positive has been found here
« Reply #6 on: April 23, 2018, 12:09:20 AM »
Outside of beta/new program testing and questions in the forums I don't run them either.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline LukasJ

  • Avast team
  • Jr. Member
  • *
  • Posts: 86
Re: A false positive has been found here
« Reply #7 on: April 23, 2018, 07:26:44 AM »
Hi guys,
Detection was fixed.

Thanks
Lukas