False positive - costing me money and a headache!

Viruses and worms
1

Hi,

My name is Christopher from Fired Up Software. Your latest Avast virus signature update is throwing a false positive concerning my software.

I’ll be glad to submit whatever I need to submit but please correct this error!

Thanks,

Christopher

2

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.

You could also check the file at: VirusTotal - Multi engine on-line virus scanner and see if there any other AVs detecting this also.

3

Can you inform the file as being a false positive? (click on the bottom right of the virus warning message).

Please submit it to VirusTotal and let us know the result. VirusTotal has a file size limit of 10Mb. You can use VirScan also.
Also you can send it in a password protected zip to virus@avast.com. Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

Edited (post David’s suggestions): Sorry for the inconvenience.

4

Thanks.

I have sent the zipped executable with password and also scanned on Joti and VirusTotal.

Joti reported Avast as the only positive and VirusTotal reported Avast and GData as it being a Win32:Trojan-gen {Other}

Thanks again,

Christopher

5

You’re welcome.

GData also uses avast as one of its two scanners so that is effectively only one detection.

The avast Win32:Trojan-gen is generic signature (the -gen at the end of the malware name), so that is trying to catch multiple variants of the same type of malware and is a fine balance between detecting a new variant and detecting something valid as infected.

6

Hello,

this fp is fixed internally - will be released in 2 hours.

Regards

7

Thanks for the quick answer.