Author Topic: False Positiv???  (Read 6094 times)

0 Members and 1 Guest are viewing this topic.

Hamilton

  • Guest
False Positiv???
« on: December 08, 2011, 09:02:22 AM »
Hi

I scanned my HTC Desire on the sd-card, and it found 2 problems in:
/mnt/sdcard/backup.dat
/mnt/sdcard/download/Download.apk

I have no idea what it is or weather it's a virus or not? What happens if I delete the files?

Thanks  :)

Offline kovac

  • Avast team
  • Newbie
  • *
  • Posts: 16
Re: False Positiv???
« Reply #1 on: December 08, 2011, 09:30:30 AM »
Hi Hamilton,

can you please provide more information? What virus is detected on those files? If there is no virus maybe you have similar issue like in this thread: http://forum.avast.com/index.php?topic=90118.0

Thanks,
Peter
Per aspera ad astra.

Hamilton

  • Guest
Re: False Positiv???
« Reply #2 on: December 08, 2011, 10:03:56 AM »
Well in "Virus Scanner" it says:

2 problems found !
 Resolve all

/mnt/sdcard/backup/dat
/mnt/sdcard/download/Download.apk

If I press on Resolve all it says: You are about to: ignore 2 items. Do you really want to continue?

I can't find anywhere it says if it's a virus or what kind?

It's not the same problem as the thread you linked to...

Offline Filip Havlicek

  • Moderator
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positiv???
« Reply #3 on: December 08, 2011, 10:31:58 AM »
Hi Hamilton,

if you look at the application page on the Android Market, you will see how it should look like when the virus scanner finds a virus (not sure this direct link to the picture will work -> https://lh4.ggpht.com/vReGDVl-S8MouqKEKAjv98gafoc_Moh1Wh58GJAU29yZ4e0ynxZUP8UFCDIFZnQg3qdO ). The virus name on the example is called "Eicar" and it's a test virus. Are your results also red (malware) or yellow/orange (problem)? If they are red, there should be definitely some kind of virus name written below them (the same as "Eicar" on the screenshot). If they are yellow, there should be some explanatory text below them.

Thanks,
Filip

Hamilton

  • Guest
Re: False Positiv???
« Reply #4 on: December 08, 2011, 10:48:20 AM »
Okay thanks :)

It's yellow, but there aren't any description of what it is... Like your example you give with the "Eicar" virus...

Offline Filip Havlicek

  • Moderator
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positiv???
« Reply #5 on: December 08, 2011, 11:13:54 AM »
Well that's pretty weird, all the yellow results should have some explanatory (white) text. Do you think you could email me those two files?

Filip

Hamilton

  • Guest
Re: False Positiv???
« Reply #6 on: December 08, 2011, 11:35:02 AM »
Sure I can :) But I can first do it when I come home from school, then I will try to email them to you.. :) Stay tuned..

Offline Filip Havlicek

  • Moderator
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positiv???
« Reply #7 on: December 08, 2011, 11:36:47 AM »
OK, thanks a lot :)

Filip

Hamilton

  • Guest
Re: False Positiv???
« Reply #8 on: December 08, 2011, 05:16:45 PM »
I've send it now  :)

Offline Filip Havlicek

  • Moderator
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positiv???
« Reply #9 on: December 08, 2011, 05:44:02 PM »
Yes, got them, thanks!

I think I have fixed the issue with them, it should be fine in the next virus definitions update. It would be great if you could verify it when they arrive :)

Filip

Hamilton

  • Guest
Re: False Positiv???
« Reply #10 on: December 08, 2011, 06:03:27 PM »
Of course  ;D

Hamilton

  • Guest
Re: False Positiv???
« Reply #11 on: December 09, 2011, 02:48:42 PM »
Hi Filip

I've updated the virus defination to 111209-01 and ran a scan and it DIDN'T find anything  ;D So no more problem  :)


Offline Filip Havlicek

  • Moderator
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positiv???
« Reply #12 on: December 09, 2011, 02:52:56 PM »
OK, glad to hear that :)

Filip