Author Topic: 2 false positive...  (Read 4570 times)

0 Members and 1 Guest are viewing this topic.

Offline rdsu

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 534
  • ...
2 false positive...
« on: September 10, 2004, 02:59:57 AM »
Hi,

Today I tried the avast! Pro and scan my disc.

The result was 2 false positives...
I tested this files on Kaspersky and NOD32...

Can this be confirmed?
« Last Edit: September 10, 2004, 02:31:42 PM by Pavel »
Avast Free Antivirus: Web Shield & Home Network Security.

The Maxx

  • Guest
Re:2 false positive...
« Reply #1 on: September 10, 2004, 03:28:58 AM »
I ran that file by http://virusscan.jotti.dhs.org/ and out of the 9 AV's on that site avast! was the only one that said it found anything.  Said it find VBS:Malware other AV's on there were F-Prot, F-Secure, mks_vir, Norman and a few others and no other found any virus or spyware at all.

So either it's a false positive or these other AV's needs to add that virus to their lists.


UPDATE

I uploaded both of those files and avast! found Win32:Trojan-gen. in the stdio.dll file and that VBS: Malware in the index.html file.
« Last Edit: September 10, 2004, 03:38:08 AM by The Maxx »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:2 false positive...
« Reply #2 on: September 10, 2004, 04:16:51 AM »
VaMPiRiC_CRoW, probably as you used two on-line scanners...
Better will be if you can zip the files with a password and send it to Alwil (virus (at) avast.com) informing the password used  ;)
« Last Edit: September 10, 2004, 04:17:39 AM by Technical »
The best things in life are free.

Offline rdsu

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 534
  • ...
Re:2 false positive...
« Reply #3 on: September 10, 2004, 02:21:29 PM »
VaMPiRiC_CRoW, probably as you used two on-line scanners...
Better will be if you can zip the files with a password and send it to Alwil (virus (at) avast.com) informing the password used  ;)

I will do that, Technical ;)

Thanks
Avast Free Antivirus: Web Shield & Home Network Security.

kareld

  • Guest
Re:2 false positive...
« Reply #4 on: September 10, 2004, 02:36:27 PM »
Hi all,
  the files really was false positives. The repair should appear in the next virus database update.

Jlo

  • Guest
Re:2 false positive...
« Reply #5 on: September 10, 2004, 10:15:04 PM »
Interingly enough it was not just Avast that falsed alarm on those files. I ran the file through http://www.virustotal.com/flash/index_en.html and Panda and Sybari (which uses a number of AV engines) alerted to the file. See below.

This is the report of the scanning done over "files.zip" file that VirusTotal processed on 09/10/2004 at 09:19:00.
Antivirus Version Update Result
BitDefender 7.0 09.09.2004 -
ClamWin devel-20040822 09.08.2004 -
McAfee 4390 09.08.2004 -
NOD32v2 1.867 09.09.2004 -
Norman 5.70.10 09.09.2004 -
Panda 7.02.00 09.09.2004 HackTool/Stdio.A
Sybari 7.5.1314 09.10.2004 IRC/Flood.ak.plugin
Symantec 8.0 09.09.2004 -
TrendMicro 7.000 09.08.2004 -

Cheers

Jlo