False Positive on a Harmless, User-Friendly Software

Dear Avast Community Members,

Can some member help me out. The software Clone Files Checker (file named Clone Files Checker.exe) which is a reputable duplicate file finder software has been detected as a threat by Avast. I have submitted the file through web form but have not received any response so far. I am looking for a quick acceleration and thorough examination of the file with the help of you guys. I will highly appreciate if some engineer can pick this case for analysis and urgent resolution.

Thank You.

Have you tested The file at www.virustotal.com
Post link to scan result here

Also what does The avast message say

I have tested on Avast, here is the screenshot and message on its files.

Also upload and test it at virustotal.com and post link to scan result

Guys here is the link to Virustotal findings: https://www.virustotal.com/#/file/5f9c2e18faf97f7e118f6eaad7bfcec7c5146141de970e9990fb6c4345f81d1c/detection

avast is notified, they may reply here and it may take hours

Also consider this in the mean time: http://www.shouldiremoveit.com/Clone-Files-Checker-124533-program.aspx

polonus

Hello,
it has been flagged as a deceptor because it is signed by company which violoted some of Deceptor Requirements (https://customer.appesteem.com/Home/Deceptor).

To fix this problem author of the SW have to visit https://customer.appesteem.com/Home/DeceptorFix and contact AppEsteem directly.

Milos

We’re in talks with them and have acted on the technical requirements. There are 4 reasons I ask Avast to review Clone Files Checker (CFC) independently as a separate case:

  1. It’s not linked to the software which got under the check of AppEsteem. CFC is not listed as a deceptor. It’s detection based on company signature is a little harsh in my view.
  2. We’ve made all the changes in other software, and are willing to make sure our software has the highest standards when it comes to be fair and meeting these requirements set by AppEsteem. If you need proof of changes I can send you file which is being evaluated by them. It’s now insanely safe and is under review.
  3. Since their evaluation take time, I request Avast to be fast with the case they have in their hand at the moment and mark an absolutely clean software as clean. This will help end users of CFC who also happen to be using Avast.
  4. Although Avast can rely on a third party for evaluations but we expect more comprehensive mechanism from Avast helping software vendors. We are open to more examination from your side and assure you full cooperation.

So I am once again requesting you to fast process our case. Your speed can not only help us but also help our combined users.

Thanks in advance.

In continuation of this, I would like to inform you that AppEsteem has resolved the issue on our App RegInOut System Utilities. You can see the updated status on their website: https://customer.appesteem.com/deceptors Click on show resolved to show it in the approved list.

I, therefore, request you to remove Clone Files Checker from your detection.

Any update on it guys?

I am waiting. Please respond.

This has been resolved. Can you please check?

Hello,
you have to use new certificate for signing the apps which are clean. Then share the newly signed file with us to verify.

Best regards,
Milos

Milos, Thanks for your response. I want to ensure you that all our apps are clean. You can check the AppEsteem database here: https://customer.appesteem.com/deceptors Only one of our softwares, RegInOut System Utilities, was problematic. However, it too has been quickly fixed and removed from their list by AppEsteem. We’ve updated that software on our website as well. It’s live, and you can check it. Should not it fix the problem?

I request you to please give us an easy option. Please remove our software Clone Files Checker from detection based on company signature because none of our apps are malware or deceptor. If you need to examine all 4 software that we distribute, we are ready for that.

Please help.

Hello,
I just want you to understand that a certificate which was used for signing non-clean app(s) makes mess in classification of other apps signed with the same certificate. You can image it like the certificate cannot be trusted anymore as it was used for non-clean app. So this is the reason why it is better to use new certificate.

Milos

Milos, we are buying new digital certificate for thus software but I would highly appreciate if you mark the old signature clean. We have done the hardwork on our software, please don’t make our efforts go in vain.

OK, thanks for the info. We are removing detection by digital signature. Let us know when you will have signed some binary with the new certificate.

Milos

Milos,

Unfortunately some of the internal files of Clone Files Checker are once again getting detected by Avast. You just cleared the software setup a few days back and I was assured that software will not get detected by Avast anymore.

Here are the files and the virustotal.com reports:

https://www.virustotal.com/#/file/e44a56815eee0fcb7bf0741b5617914de5eef45561c1796fc4a049c3547e26d9/detection
https://www.virustotal.com/#/file/1bf630ff07eb2936a78438de58196a704a0d226f302ba712ab0aaa63d535bfcb/detection

Please immediately remove them from detection. I am waiting. Please also add Clone Files Checker to your Whitelist.

Hello,
files from VT links were whiltelisted.
Regarding other files we need files or sha256 of the files (or VT links) submitted through https://www.avast.com/false-positive-file-form.php
Or follow steps from https://support.avast.com/en-my/article/229/

Milos