False Positiv Nvidia Driver?

Viruses and worms
1

My avast found a virus in the latest Nvidia Driver 260.99.
http://www.virustotal.com/file-scan/report.html?id=ea4bf07d32467feb4d4c9e9dea031fecee8af2bbd740257998e07163f0cbcd96-1293453445

Is this a false positiv?

By the way… yesterday avast got a problem with the ati driver… today with nvidia… whats going on?
I hope it was not a decision to change to avast…

Greetz Hexo

2

wow can’t believe it, after ATI yesterday (now fixed), it’s NVidia’s turn… will check that in a minute.

3

okay I got it too after updating to 101227-0 (101226-1 was still fine ;D )

ps: of course same FP with NV 263.09 (5** series)

4

If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.

  • In the meantime (if you accept the risk), add the full path to the file to the exclusions lists:
    File System Shield, Expert Settings, Exclusions, Add and
    avast Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

Though given the location of this I don’t believe it is active, or no doubt avast’s file system shield would probably have alerted. So perhaps no need to rush to exclude it, just monitor it in the chest as suggested.

5

Thank Logos.
But what is going on with avast? Is that normal, that they have so much FP`s???
I am new with avast. While i was using avira i have never had a FP

EDIT: I summited the file already.
I think really that this must be a FP.

6

Hello,
thank you for notice, false positive will be fixed.

Milos

7

okay, @David, the problem with submitting an FP through the UI is that it won’t be sent before the next update ;D (when it’s already fixed, if it’s been reported and noticed on the forums).

@Hexo: you’ve been lucky, as Avita is reputed for being the champion of FPs, while Avast rarely has any.

8

It is sent during update checks, it doesn’t rely on there being an update present.

When I submit a file, I always do a manual update to force the upload during the update. I also believe that when you have a file for submission, it doesn’t wait for the next ‘routine’ auto update check. Vlk said there is some sort of prioritisation, I can’t recall exactly what he said.

9

not sure about this, I thought the contrary, that an actual update had to happen, and not just a check, but okay, you may be right…

10

He is right since I do that when I want to send a virus to avast and that works

11

As I submit many samples and always do a manual update to get it away. I monitor the update ‘check’ and part of that is the upload of the sample, see image example.

12

okay so np, you’re right. I had no idea as I never submit anything (have no reason to either, don’t test malware), except once a year like today ;D, testing someone else’s FPs.

13

Btw, FPs can also be sent with this interface…
http://www.avast.com/contact-form.php?loadStyles
asyn