Andica false positive?

Viruses and worms
1

I tried to upload a file to the contact form AT http://www.avast.com/contact-form.php?subject=VIRUS-FILE many times but it does not work. It is called dde6b5a.msi and is a Windows Installer Package by Andica Limited. Avast has flagged it as malware as well as 2 other Andica files and another by Unity Player. Those 3 were all moved to the chest.

2

Try to send them to virus@avast.com subject:false positive. In a password protected archive password:virus

3
Those 3 were all moved to the chest.
you can send the files from chest

Submitting files from the Virus Chest to AVAST Virus Lab
http://www.avast.com/en-eu/faq.php?article=AVKB21#artTitle

4

Thanks Steven Winderlich and Pondus for the speedy responses.

I’ve submitted the files that were already in the chest.

Unfortunately, I don’t know what to do about the one I was trying to upload. It is a pretty big file around 45 MB so too big to email, though I haven’t tried zipping it.

And I got a warning message when I tried to move it to the chest, too.

5
Unfortunately, I don't know what to do about the one I was trying to upload. It is a pretty big file around 45 MB so too big to email, though I haven't tried zipping it.
right click and pause avast shields ..... you should then be able to send it in a mail i see you use Gmail. if Gmail block you from sending it you must use a zip program that encrypt the content, like 7zip

you can also test the file here www.virustotal.com or here www.metascan-online.com if scanned before, click rescan
you may post link to scan result here

6

Hi Pondus

Thanks again. i did already run a test on virustotal.com. The online avast scan also thinks it’s malware though others did not. I’ll rescan and post links.

ETA: Link

https://www.virustotal.com/en/file/af4644272fca2fd2c447845f7ad1e421f206d4f038794c100e7798f7b44cd5f5/analysis/