Author Topic: False Positive  (Read 13243 times)

0 Members and 1 Guest are viewing this topic.

iross

  • Guest
False Positive
« on: January 09, 2012, 05:36:56 AM »
I have just installed Avast Mobile on my phone (Huawei 8150, Android 2.2 stock, rooted), and the first virus scan is showing z4root as a "Problem".

I am not aware that this Ap is a problem, so have reported it as a false positive.

In the meantime, how do I get rid of the "Problem" notification?

Thanks

Offline Filip Havlicek

  • Avast team
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positive
« Reply #1 on: January 09, 2012, 09:57:16 AM »
Hi,

if it is a PUP detection, you can turn those off in the application Settings.

Filip

iross

  • Guest
Re: False Positive
« Reply #2 on: January 09, 2012, 10:01:15 AM »
Thanks for your response.

It is PUP, but if I turn that off, does it mean the AV will be less effective for future scans?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: False Positive
« Reply #3 on: January 09, 2012, 10:03:21 AM »
It is PUP, but if I turn that off, does it mean the AV will be less effective for future scans?

Well, it won't detect PUP anymore. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Filip Havlicek

  • Avast team
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positive
« Reply #4 on: January 09, 2012, 10:06:38 AM »
Exactly. PUP = Potentially Unwanted Program (which z4root is if you are not the one that put it there), if you know that you want it, disable the PUP detections. It won't detect any PUPs in the future.

Filip

sioban

  • Guest
Re: False Positive
« Reply #5 on: September 12, 2012, 05:14:58 PM »
It still detect my PUP...

Offline Filip Havlicek

  • Avast team
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positive
« Reply #6 on: September 12, 2012, 05:52:17 PM »
Which one?

Filip

sioban

  • Guest
Re: False Positive
« Reply #7 on: September 12, 2012, 06:24:12 PM »
Droidsheep

Offline Filip Havlicek

  • Avast team
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positive
« Reply #8 on: September 12, 2012, 07:05:45 PM »
Is it detected as a PUP? Does turning off PUP detections turns off the detection?

Filip

sioban

  • Guest
Re: False Positive
« Reply #9 on: September 12, 2012, 07:07:55 PM »
Yes it's detected as a PUP.
Turning off LPI does not help :(

Offline Filip Havlicek

  • Avast team
  • Massive Poster
  • *
  • Posts: 2647
Re: False Positive
« Reply #10 on: September 12, 2012, 08:14:07 PM »
That's weird then, there was an error in the checkbox that it should have been fixed in AMS 2 release. Can you post the exact detection?

Filip

sioban

  • Guest
Re: False Positive
« Reply #11 on: September 12, 2012, 08:36:17 PM »
Yes : Android.DroidSheep-D [PUP]

sioban

  • Guest
Re: False Positive
« Reply #12 on: September 14, 2012, 10:17:56 AM »
I have the same problem with another PUP : zAnti
Detection : Android:HackTool-A [PUP]

with LPI activated or not.

By the way, some other PUP are not detected at all :
- Wifikill
- Fing
- Network Spoofer
- Routerpwn

svehlak

  • Guest
Re: False Positive
« Reply #13 on: September 14, 2012, 01:02:42 PM »
I tried on SGSII with Droidsheep and it does not showing any PUP warning. Can you please specify the application?

sioban

  • Guest
Re: False Positive
« Reply #14 on: September 14, 2012, 01:29:15 PM »
Do you want me to send you the APK ?

For zAnti it's there : http://www.zimperium.com/anti.apk

Anyway, as they are detected as PUP, shouldn't the ignore LPI functionnality, really ignore ANY Pup ?