Author Topic: Checking potential false positive on Weather and Clock Widget  (Read 927 times)

0 Members and 1 Guest are viewing this topic.

Offline purchasing2

  • Newbie
  • *
  • Posts: 4
This morning Avast Mobile Security greeted me with a warning that the Weather and Clock Widget I've been using for nearly 10 years was infected with malware.  I selected "resolve" which uninstalled it.  I then went to Google's Play Store which Google claims is protected, however a reinstall triggered the same warning.  Can this warning be double-checked?  The app is very handy but of course someone may have found a way to infect the source nonetheless.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66742
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Checking potential false positive on Weather and Clock Widget
« Reply #1 on: March 22, 2020, 11:09:51 AM »
Test the file at VT (https://www.virustotal.com) and post the link to the result here.
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline purchasing2

  • Newbie
  • *
  • Posts: 4
Re: Checking potential false positive on Weather and Clock Widget
« Reply #2 on: March 22, 2020, 04:19:55 PM »
Thank you for the reply.  Unfortunately, VT does not seem to have the ability to interact with the Google Play Store which is where this app resides.  Play Store hides the files it downloads so I appear to have no ability to submit anything useful to VT.  Is there another means to check Google Play apps (Google does not seem to have a problem with this app but this would not be the first app to sneak through Play Store checking)?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66742
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Checking potential false positive on Weather and Clock Widget
« Reply #3 on: March 23, 2020, 06:43:17 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 20.8.2427.B#2 [UI.560] - CC 5.71 - EEK - FF ESR 68.12 [NS/AOS/uBO/PB] - TB 68.12 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline purchasing2

  • Newbie
  • *
  • Posts: 4
Re: Checking potential false positive on Weather and Clock Widget
« Reply #4 on: March 24, 2020, 01:16:00 AM »
Again, thank you, but unfortunately this doesn't help.  The form at that link asks for either a URL or a file, but Avast Mobile Security is reacting to neither.  It's claiming that an app installed through the Google Play Store contains malicious code.  Mobile Security provides no other details — no indication of the offending file.  Since the entry on Google's Play Store for the Weather & Clock Widget for Android app doesn't provide this information either, there is no way to report the false positive using this form. 

Is there a way to report this via the app name on Google's Play Store?

Offline rocksteady

  • Advanced Poster
  • **
  • Posts: 822
Re: Checking potential false positive on Weather and Clock Widget
« Reply #5 on: March 24, 2020, 10:34:45 AM »
Maybe worth also reporting in Android Security section of forum here:
https://forum.avast.com/index.php?board=37.0

Offline purchasing2

  • Newbie
  • *
  • Posts: 4
Re: Checking potential false positive on Weather and Clock Widget
« Reply #6 on: March 27, 2020, 11:48:17 PM »
Thanks for the suggestion but I decided not to invest any more time with this, except that I sent the developer of the app an alert about this response and that I was uninstalling their app until this clears up.