False Negative!

system · 2015-07-15T17:10:23.000Z

Today I downloaded some software I thought might be suspicious.

After I downloaded it I double checked by scanning the downloaded file using Avast Free.
I was told the software was safe, no threats found.

I ran the software and now I have mallware on my PC!!! It did not allow for cancellation of the instal procedure and installed stuff before I could force it closed with task manager.
I have removed the main mallware it installed but now have to manually fix my regedit.exe as that has been hijacked so that it fails to run with an error message that says “The service cannot accept control messages at this time.”

All this trouble because Avast falsely told me the software was clean!!!

How can I submit a file as possible mallware when Avast thinks it has no threats?

Asyn · 2015-07-15T17:29:02.000Z

tanjo2001 post:1:

How can I submit a file as possible mallware when Avast thinks it has no threats?

You can report it here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE

Pondus · 2015-07-15T19:04:29.000Z

I ran the software and now I have mallware on my PC!!!!

I guess no malware but PUP .... have you turned on avast PUP detection? A very good PUP remover is Malwarebytes

Upload and test the file at www.virustotal.com or www.metascan-online.com if tested before, click rescan for a fresh result
Post link to scan result here

system · 2015-07-15T19:23:47.000Z

Pondus post:3:

I ran the software and now I have mallware on my PC!!!!
I guess no malware but PUP .... have you turned on avast PUP detection? A very good PUP remover is Malwarebytes
Upload and test the file at www.virustotal.com or www.metascan-online.com if tested before, click rescan for a fresh result
Post link to scan result here

I highly think that because the name of the secretly installed software was “CutThePrice”, it’s mallware

Secondmineboy · 2015-07-15T19:24:46.000Z

Please still scan on Virustotal and provide a link to the scan

If already scanned click rescan.

system · 2015-07-15T19:30:21.000Z

Asyn post:2:

tanjo2001 post:1:

How can I submit a file as possible mallware when Avast thinks it has no threats?

You can report it here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE

Thank you. I have now submitted the offensive file

Pondus · 2015-07-15T19:32:16.000Z

Have you tested it at VT ? … if not give the download link and somone here will do it

Quote

[b]About CutThePrice: [/b]
CutThePrice is categorized as potentially unwanted program, namely adware program because it may come to your computer and install under your inadvertently consent. It comes bundled with free software, video player and download manager program, for instance. Below is a screenshot of the Get Ultra Premium Merchants bundled software, see for your reference:

system · 2015-07-15T19:34:58.000Z

Steven Winderlich post:5:

Please still scan on Virustotal and provide a link to the scan

If already scanned click rescan.

I do not like to use web site based scans. The ONLY way any web site gains access to my files on my PC is by me telling it what file to upload to the site! Call me over cautious if you want

Secondmineboy · 2015-07-15T19:36:49.000Z

OK.

Can you give a link to the download?

system · 2015-07-15T19:40:55.000Z

Pondus post:7:

Have you tested it at VT ? … if not give the download link and somone here will do it

Quote

[b]About CutThePrice: [/b]
CutThePrice is categorized as potentially unwanted program, namely adware program because it may come to your computer and install under your inadvertently consent. It comes bundled with free software, video player and download manager program, for instance. Below is a screenshot of the Get Ultra Premium Merchants bundled software, see for your reference:

I think that categorization for CutThePrice is incorrect! How can it not be mallware? It was installed secretly without my consent or knowledge of it being a part of the installation. The installer also has no means to abort the installation after it has been initially run.

Anyway, I have fixed everything that the installer broke and have had the answer I wanted in the form of where to submit the file to Avast. Thanks for all the help guys

Pondus · 2015-07-15T19:45:09.000Z

I think that categorization for CutThePrice is incorrect! How can it not be [b]mallware[/b]? It was installed secretly without my consent or knowledge of it being a part of the installation.

Probably because it does not do anything malicious ..... only unwanted ad popups

Malwarebytes PUP criteria https://www.malwarebytes.org/pup/

It may already be detected by avast as a PUP, something we could check if you gave us the download link … or tested the file at VT or Metascan
Avast PUP detection is default off, except for in boot scan

Asyn · 2015-07-16T05:07:38.000Z

tanjo2001 post:6:

Asyn post:2:

tanjo2001 post:1:

How can I submit a file as possible mallware when Avast thinks it has no threats?

You can report it here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE

Thank you. I have now submitted the offensive file

You’re welcome.

Announcements