Author Topic: False Positive (Evo-gen [Trj])  (Read 12699 times)

0 Members and 1 Guest are viewing this topic.

Offline tcnet

  • Newbie
  • *
  • Posts: 6
False Positive (Evo-gen [Trj])
« on: March 22, 2023, 09:46:36 AM »
https://play.google.com/store/apps/details?id=net.techc.chargingmonitor

My app consists of nothing but using the battery manager. There is not a single permission in the manifest. No accessibility service. Even no internet access, no ads or in-app-purchase. NOTHING!

I used the in-app function of the avast app to report the false-positive. But shortly after I got a notification that the app wasn't able to send the message.

I reported the false-positive with the well known form. But nothing happened. I reported it again. But nothing happened.

Now I conducted some tests and come to the following conclusion. If I set minifyEnabled to false I get no report from avast. But after I set minifyEnabled to true I got: Malware detected! Tra la la...

It seems that the guys from avast cannot cope with proguard.

I verified that by creating a new empty app in Android Studio and set minifyEnabled to true and BINGO: Malware detected!

It's a shame! A multi billion dollar company isn't capable to find that out by them self.

Screenshot:

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1541
Re: False Positive (Evo-gen [Trj])
« Reply #1 on: March 22, 2023, 12:33:53 PM »

Offline tcnet

  • Newbie
  • *
  • Posts: 6
Re: False Positive (Evo-gen [Trj])
« Reply #2 on: March 22, 2023, 01:13:39 PM »
Maybe you didn't read my post in full. I stated that I ALREADY filled the form and nothing happened.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89033
  • No support PMs thanks
Re: False Positive (Evo-gen [Trj])
« Reply #3 on: March 22, 2023, 03:02:35 PM »
Maybe you didn't read my post in full. I stated that I ALREADY filled the form and nothing happened.

It usually takes a day or to to get a response, I found that what I reported (website in my case) was cleared before I got a reply.

As a developer you might want to check this out, Though I don't know if this is the same for android apps.
Developers - Avast Threat Labs - File whitelisting:  See https://support.avast.com/en-ww/article/229/ and https://support.avast.com/en-ww/article/228/
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline tcnet

  • Newbie
  • *
  • Posts: 6
Re: False Positive (Evo-gen [Trj])
« Reply #4 on: March 22, 2023, 04:18:41 PM »
Maybe you didn't read my post in full. I stated that I ALREADY filled the form and nothing happened.

It usually takes a day or to to get a response, I found that what I reported (website in my case) was cleared before I got a reply.

As a developer you might want to check this out, Though I don't know if this is the same for android apps.
Developers - Avast Threat Labs - File whitelisting:  See https://support.avast.com/en-ww/article/229/ and https://support.avast.com/en-ww/article/228/

I verified that by creating a new empty app in Android Studio and set minifyEnabled to true and BINGO: Malware detected!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89033
  • No support PMs thanks
Re: False Positive (Evo-gen [Trj])
« Reply #5 on: March 22, 2023, 06:45:32 PM »
There is no need to shout!

I don't work for Avast, I'm an avast user simply trying to help and show other options.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline tcnet

  • Newbie
  • *
  • Posts: 6
Re: False Positive (Evo-gen [Trj])
« Reply #6 on: March 23, 2023, 12:21:19 AM »
There is no need to shout!

I don't work for Avast, I'm an avast user simply trying to help and show other options.

If I were avast, then I'd do the same.

Offline tcnet

  • Newbie
  • *
  • Posts: 6
Re: False Positive (Evo-gen [Trj])
« Reply #7 on: March 23, 2023, 02:17:21 AM »
It seems that my post here has an effect. My app and a new empty app with minifyEnabled to true are no longer reported. Now it's time to apologize for Avast. Not only for me, but for all developers who had so much trouble with Avast and still have. I think Twitter is the right place for it: https://twitter.com/Avast

Just write:
Dear developers. We are so sorry to caused you so much trouble with our Evo-gen [Trj] messages. But we are too stupid to pose as a reliable IT company.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: False Positive (Evo-gen [Trj])
« Reply #8 on: March 23, 2023, 01:30:26 PM »
You could start here: https://reports.exodus-privacy.eu.org/en/
Quote
Results

com.tofabd.batteryanalyzer logo
Battery Charging Monitor
3.03
2 tracker(s) 7 permission(s)

com.waterdaaan.chargemonitor logo
Charge Monitor
1.5.1
0 tracker(s) 2 permission(s)

org.secuso.privacyfriendlynetmonitor logo
Net Monitor
2.1
0 tracker(s) 2 permission(s)

org.secuso.privacyfriendlynetmonitorapp logo
Net Monitor
2.1
0 tracker(s) 2 permission(s)

com.parizene.netmonitor logo
Netmonitor
1.19
5 tracker(s) 13 permission(s)

com.jmm.networkmonitor logo
NetMonitor
2.18
3 tracker(s) 13 permission(s)

ru.v_a_v.netmonitor logo
Net Monitor Lite
1.68
0 tracker(s) 13 permission(s)


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline tcnet

  • Newbie
  • *
  • Posts: 6
Re: False Positive (Evo-gen [Trj])
« Reply #9 on: March 24, 2023, 02:30:40 AM »
A post was deleted!