False Positive

Rednose · 2008-01-27T01:54:22.000Z

Hi all

I want to report a False Positive with the 080126-0, 26-01 virus definition update.

An update for the game MOH Airborne is detected as : Win32:Troj-gen {Other}.

The file is pretty big ( 1.29 GB ), but you can find it on the official website from the game :

http://www.ea.com/moh/airborne/news.jsp?ncc=1&id=39

Thank you for looking at it

Greetz, Red.

DavidR · 2008-01-27T14:17:14.000Z

What is the exact file name that is being detected, surely that isn’t 1.29GB unless it is detecting the installation file as infected.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

Rednose · 2008-01-27T14:25:08.000Z

Sorry, maybe I was not clear :-\ It detects the installer as infected, NOT the installed patch

I Just found out that the installer of the Demo of the same game got the same message from Avast :-\

It is not that I have a problem with it, but I am sure the Dev Team would like to know why Avast flags those installers so they can prevent it in the future

Greetz, Red.

DavidR · 2008-01-27T17:47:35.000Z

You could send a false positive report without attaching a sample, basically a copy of your first post with a little more info, like the actual file name (installer, patch or otherwise) send it to virus @ avast.com (without the spaces).

If you are happy that you believe it is a false positive, you could exclude the file from scans until it is corrected.

If it is indeed a false positive, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions
Periodically check it (scan it, or visit the site) and see if it is still detected. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Rednose · 2008-01-27T18:26:49.000Z

I will do as you suggested, and send them a false positive report with some additional info and download mirrors for both files

I have already excluded both files in my backup the way you described, but thanks anyway for your help

Greetz, Red.

DavidR · 2008-01-27T21:32:05.000Z

Your welcome.

Rednose · 2008-01-28T23:30:07.000Z

It is fixed with the latest update

Greetz, Red.

DavidR · 2008-01-29T14:51:27.000Z

Thanks for the update.

If you haven’t already done so you can remove the exclusion.

Announcements