False Positive

Mac · December 13, 2003, 7:50am

Ok guys I know Panda active scan has that problem with the deffinition files being detected as infected but F-Secure? I have the full F-secure antivirus 2004 package on my HD and it turns infected with Win32:Naith-C [Wrm]
Housecall Does Not find this
the RAV online scan does not find this
Bitdefender online scan does not find this

raman · December 13, 2003, 8:27am

I think it is the CLRAV cleaner from KAV(F-secre) it is a known issue.

Mac · December 13, 2003, 1:00pm

ok I did some more work and found that the old F-Secure antivirus 2003
is not infected.
F-Secure Antivirus 2003 is the home version of 5.41
F-Secure Antivirus 2004 is the home version of 5.51

Mac · December 13, 2003, 1:02pm

I think it is the CLRAV cleaner from KAV(F-secre) it is a known issue.

in the new version the F-Prot engine is replaced with Libria
is this new engine the cause

raman · December 13, 2003, 1:14pm

Do you have that package installed on your PC and does Avast reports any file as infected.

Mac · December 13, 2003, 3:16pm

i have the package installed ( with the real time scanning OFF)
only the install package is infected

system · December 13, 2003, 6:09pm

Maclover2000,

Remind that it’s always better to have a false positive, than a false negative ;D

(just joking).

Waldo

Mac · December 13, 2003, 6:29pm

I know. But if you try to download the eval and unlock it it gives you the 2003 version so I would like to keep it on my hard drive as backup without that false positive. and it cant be emailed to ALWIL because its 30MB! :o

Mac · December 14, 2003, 4:07pm

another scan this morning and still says infected >:(

Mac · December 14, 2003, 4:20pm

here is screenshot

system · December 15, 2003, 1:19pm

Hi MacLover2000,
it’s the same case as with the Panda. In the program is a part of the Naith-C. Try put the file to the Avast’s scanning exceptions list in order to stop get alarms on it.

Mac · December 15, 2003, 8:24pm

i have added it to the list and the fals alarm is gone thank you

Mac · December 21, 2003, 12:05am

in the latest iAVS update all false positives with F-Secure were fixed ;D

system · December 21, 2003, 8:10am

Yep! F-Secure contacted us and explained that part of the unecrypted virus code is there by mistake and it will be removed asap. But they have already huge amount of CDs distributed and we were not the only one to detect this.

We appreciate this (everybody can make a mistake) and corrected the FP. Unlike Panda, which has part of at least 20 viruses - and they do nothing about it…

Pavel

Mac · December 21, 2003, 3:15pm

thank you
F-secure is my Backup scanner of corse

Mac · December 21, 2003, 5:29pm

pavel as promised F-secure has released a hotfix for FSAV 2004 today

False Positive

Announcements