Author Topic: exe files generated by my program seen as false positive  (Read 2931 times)

0 Members and 1 Guest are viewing this topic.

Offline a_catalin

  • Newbie
  • *
  • Posts: 3
exe files generated by my program seen as false positive
« on: December 27, 2011, 09:36:21 AM »
Hi.
Sorry for my english.

I am a Delphi programmer.
Among the programs that I made is this one: http://forums.mydigitallife.info/threads/26932-2-small-utilities-for-Spoon-Studio
There you will find the program (ExeBuilder), sources and explanations about how it works.
Basically it takes a standard exe stored in resources, it changes it to load a exe file from the virtualized program made with Spoon Studio then adds icon(s) and informations from the original exe.
So it does the same thing as other programs like VMWare Thinapp.
The difference is that the exes made by VMWare Thinapp are not shown sometimes as infected.
Users who have some knowledge about computers will maybe understand that "Win32:Trojan-gen" means that Avast thinks that the file is maybe infected but is not sure.
But there are users who don't know this and think it's infected.

I do not think it's correct that these exes should be seen as infected (even if it's a "generic/heuristic").

Here you can find a zip file with a modified exe that is seen infected + the original exe (before modification): https://rapidshare.com/files/2493244345/samples.zip
But, since you're also computer programmers, I think you'll understand fast what this program does (from its sources).
Could you please set Avast not to "see" the exe files generated by my program as infected..?
Thanks in advance for your help.

Best regards, Catalin

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69400
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: exe files generated by my program seen as false positive
« Reply #1 on: December 27, 2011, 09:38:27 AM »
You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
Win 8.1 [x64] - Avast PremSec 21.2.2452.Beta#3 [UI.599] - EEK - Firefox ESR 78.8 [NS/uBO/PB] - TB 78.8
Avast-Tools: Secure Browser 88.2 - Cleanup P 21.1 - SecureLine 5.9 - Driver Updater 21.1 - CCleaner 5.77
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline a_catalin

  • Newbie
  • *
  • Posts: 3
Re: exe files generated by my program seen as false positive
« Reply #2 on: December 27, 2011, 09:47:28 AM »
Thank you for the suggestion.
Unfortunately I just tried and after I clicked on "send message" it showed a page with "417 - Expectation Failed" as title and body. So I don't know if the message was sent.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69400
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: exe files generated by my program seen as false positive
« Reply #3 on: December 27, 2011, 09:51:13 AM »
Thank you for the suggestion.
Unfortunately I just tried and after I clicked on "send message" it showed a page with "417 - Expectation Failed" as title and body. So I don't know if the message was sent.

Please try again, if it doesn't work you can also contact: virus[at]avast.com
Win 8.1 [x64] - Avast PremSec 21.2.2452.Beta#3 [UI.599] - EEK - Firefox ESR 78.8 [NS/uBO/PB] - TB 78.8
Avast-Tools: Secure Browser 88.2 - Cleanup P 21.1 - SecureLine 5.9 - Driver Updater 21.1 - CCleaner 5.77
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline a_catalin

  • Newbie
  • *
  • Posts: 3
Re: exe files generated by my program seen as false positive
« Reply #4 on: December 27, 2011, 09:55:17 AM »
I tried again and it seems like is working fine now...

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69400
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: exe files generated by my program seen as false positive
« Reply #5 on: December 27, 2011, 09:56:34 AM »
I tried again and it seems like is working fine now...

Good. :)
Win 8.1 [x64] - Avast PremSec 21.2.2452.Beta#3 [UI.599] - EEK - Firefox ESR 78.8 [NS/uBO/PB] - TB 78.8
Avast-Tools: Secure Browser 88.2 - Cleanup P 21.1 - SecureLine 5.9 - Driver Updater 21.1 - CCleaner 5.77
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0