Author Topic: Report false positive  (Read 1456 times)

0 Members and 1 Guest are viewing this topic.

Offline bntvrtr

  • Newbie
  • *
  • Posts: 6
Report false positive
« on: April 03, 2024, 10:18:32 AM »
This Windows desktop software is clean, but Avast reports it as Win32:MalwareX-gen [Trj] on VirusTotal, it is a false positive.

https://www.virustotal.com/gui/file/0c62d37c37d4a1b348e31be6b2dd632454d932b38b25702ab281a16a8de5063c?nocache=1

Why doesn't Avast support team provide an email address for an easy false positive report method ?

Thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: Report false positive
« Reply #1 on: April 03, 2024, 01:11:39 PM »
It is dotted all over this forum a search for reporting a false positive detection I'm sure would turn this up.

Also if this file is on your system avast detects it, you can send it to Quarantine and you should be able to report it from there.

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.

Given that there are others detecting this on the VT results, it may not be that straight forward.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37644
  • F-Secure user
Re: Report false positive
« Reply #2 on: April 03, 2024, 03:37:04 PM »
Quote
but Avast reports it as Win32:MalwareX-gen [Trj] on VirusTotal
It does not.
Your VT scan was old. Always check scan date and refresh if needed. Click on reanalyze above scan date



Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: Report false positive
« Reply #3 on: April 03, 2024, 04:06:28 PM »
Quote
but Avast reports it as Win32:MalwareX-gen [Trj] on VirusTotal
It does not.
Your VT scan was old. Always check scan date and refresh if needed. Click on reanalyze above scan date

Given the link has ?nocache=1 at the end of the URL, it should be reporting the current status.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5712
  • Spartan Warrior
Re: Report false positive
« Reply #4 on: April 08, 2024, 09:50:26 AM »
Interesting. 

Above link posted by original poster shows Avast not detecting in the latest scan, done four hours ago.  It also shows the file as a trojan and of 6/60 detect it.
Windows 10 Home 64-bit 22H2 Microsoft Windows Defender - Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.4.6112 (build 24.4.9067.762) UI version 1.0.803

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33983
  • malware fighter
Re: Report false positive
« Reply #5 on: April 08, 2024, 04:19:17 PM »
Now back to 5 out of 59 to detect.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: Report false positive
« Reply #6 on: April 08, 2024, 06:30:04 PM »
I have recently checked into this (see quote from that topic below) were there are low numbers like this, it seems they are always the same as the VT scan settings are directed by those companies (whom I haven't really heard of or come across in real life).

EDIT: Something I noticed a while ago.
When I refreshed it again and it is down to only 5 detections and I have also found something that may make a difference to that in the real world (Users).

Hovering over the names/products that do detect it, those that your average user may be unfamiliar with. They give the settings that VT should use in the on-demand scan and may differ with off the shelf/user settings.  See attached image.

Note: I haven't been able to replicate this in this instance, but for me it is likely to reduce the instances found by regular users.
« Last Edit: April 08, 2024, 06:36:24 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security