Chrome.exe FileRepMalware FP?

Viruses and worms
1

Hi,

I downloaded Chromium Portable from PortableApps sourceforge page: http://sourceforge.net/projects/crportable/files/ChromiumPortable_36.0.1933.0.paf.exe

I send to virustotal and analysis is 0/51, even avast! of virustotal says clean: https://www.virustotal.com/en/file/b7529a703ad0fdb3a78b6974e427f004f0655ab64c1f851e7f22b7a5b64e15f1/analysis/1397880810/

I install ChromiumPortable_36.0.1933.0.paf.exe with no problem from avast!.

Now I go inside the new directory and launch Chrome.exe. Here avast! blocks Chrome.exe for FileRepMalware and sends it to quarantine. avast! then wants to reboot system to run boot-time scan.

So, is this false positive? PortableApps on sourceforge.net should be clean software, no? How can I fix this situation please.

2

You can report a possible FP here: http://www.avast.com/contact-form.php

3

Ok I made report. But do you think this is true FP or maybe there is issue with my system? If you download this file that says clean on virustotal from sourceforge and perform same install and run steps do you confirm same malware detection and quarantine behaviour in your avast?

4

If you think that you are infected, post the OTL, aswMBR logs as instructed in this thread.

5

FileRepMalware detection may happen to new files with low reputation… and it is not part of the VirusTotal scan
First submission 2014-04-11 04:52:11 UTC ( 1 week, 1 day ago )

report it like Asyn said and it will be fixed…

CopyrightPortableApps.com Installer Copyright 2007-2012 PortableApps.com. Publisher Open Source Developer Product Chromium Portable Original name ChromiumPortable_36.0.1933.0.paf.exe Internal name Chromium Portable File version 12.1933.0.0 Description Chromium Portable Comments For additional details, visit PortableApps.com Signature verification Signed file, verified signature
6

Ok. So FileRepMalware is not a detection from the virus definitions, it is from some reputation score that automatically flags bad on unknown files?

Can I disable these reputation detections? I think it will go off on every new build of Chromium PortableApps Chrome.exe

Can anyone else confirm they get the same behavior on their system when they launch the Chrome.exe after installation from http://sourceforge.net/projects/crportable/files/ChromiumPortable_36.0.1933.0.paf.exe

7

You can report it to avast lab using one of these options…you may add a link to this topic in case they reply here

You can upload files and report issues to avast here : http://www.avast.com/contact-form.php (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject: False Positive / undetected sample (select subject according to your case)
zip password: infected

or you can send files from avast chest
how to use the chest. http://www.avast.com/faq.php?article=AVKB21

8

Hello.

Detection was fixed in stream update.
I do not see any alerts.

9

No, this is still not fixed. Avast keeps moving chromium portable to chest. Please fix this.

Thanks.

10

Hello

Please provide the version and where to get the download link
this is not detected by avast ,post a screenshot detection.