Author Topic: FP reported but no action taken yet  (Read 4237 times)

0 Members and 1 Guest are viewing this topic.

adam_72

  • Guest
FP reported but no action taken yet
« on: May 30, 2010, 06:13:52 PM »
Hi folks,

Avast 5 claims that the file HttpVideoDownloader.dll, contained in the free DVDVideoSoft video editing suite (www.dvdvideosoft.com) is a malware called Win32:PSWtool-L [PUP] .. if I understand it correct, this is supposed to be a potentially unwanted password tool or similar.
A scan on virustotal shows for the last 4 weeks that Avast is the only AV out of the 41 AV's utilized which detects malware in that file ... so more than likely a FP.
I submitted the sample via GUI over to Avast 10 days ago but current patterns are still detecting a PUP !
What I'd like to know now, is how Avast virus labs is treating FPs in general .... are they reacting quickly or rather leaving things as they are ? I made very good experiences regarding FP correction with Avira, but went on to try another AV

BTW, I'm using Avast free ... but from reporting FPs also the paying customers are benefitting, so I guess no limitations in place here !

Cheers, Adam

Sartigan

  • Guest
Re: FP reported but no action taken yet
« Reply #1 on: May 30, 2010, 07:07:47 PM »
I don't trust in them, their applications didn't work for me, when I converted a music, copied it to my phone, and tried to play it, when I entered in that folder my phone restarted, my face looked like:  :o

And, Web of Trust members say it has some viruses :D
http://www.mywot.com/en/scorecard/dvdvideosoft.com

Click on a category, it will short the results, click on one to view the full comment

Looks like avast!'s report is not false :)
Don't trust in them, no one of their program worked for me...

Try GeoVid or something else!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33903
  • malware fighter
Re: FP reported but no action taken yet
« Reply #3 on: May 31, 2010, 03:58:48 PM »
Hi adam_77,

There are certainly issues with the program, as is reported here: http://www.securelist.com/en/descriptions/12321765/not-a-virus:PSWTool.Win32.PdfCracker.l
and here:
http://www.threatexpert.com/report.aspx?md5=df3d96f735f82872cac78732458f24f9
It comes in the following two categories:
1. A hacktool that could be used by attackers to break into a system
2. A potentially unwanted adware program designed to deliver various advertisements to the users' systems

So certainly unwanted if you did not install it yourself deliberately and are unaware of the PUP-status of the tool,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!