False Positive!

Since yesterday, Avast is reporting the Dsp_omx.DLL as a virus or worm, its the Winamps plugin Octimax, which I have been using for years and now I can´t use it >:(

Any help would be much appreciated.

Hi,

Start by submitting it to Virustotal: http://www.virustotal.com/

HL


This might also depend on the version of Octimax you have and where you got it from. See the images below. Click them to enlarge.


To know if a file is a false positive, please submit it to VirusTotal and let us know the result. VirusTotal has a file size limit of 10Mb.
If it is indeed a false positive, send it in a password protected zip to virus@avast.com. Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

Maybe you need to disable Hide protected operating system files and enable View hidden files and folders to manage the file(s).

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be careful, you should ‘exclude’ that many files that let your system in danger.

Hi again,

As I suggested in my first post submit the file to Virustotal and take it from there.

For your info I did that a couple of days ago and got confirmation from Virustotal that the file in question was OK.

I then submitted it to virus at avast.com and 6 hours later a new VPS with fixes was out.

I even got a reply from Avast! with info and a thank you for submitting the file,
even though it was I that should have thanked them. Excellent service. :slight_smile:

HL

So, Lhotse, just update your virus database :wink:

Tech, The file in question was of course MY file.

I haven’t seen the OP’s file. If I knew his file was clean, I would have said so in my first post to him
and not pointed him to Virustoal… ???

Edit:typos

Anyway… updating the virus database will correct (hopefully) the false positive detection.

Yes, but only IF it is a false positive. I can’t say so (not yet anyway). :slight_smile:
That was my reason for pointing him to Virustotal in the first answer in this thread. :cry:

Sure… we’re thinking and writing the same :wink:

Yes, I hope so, but this thread is not a star example of that… ;D

Have a nice (evening), but evening is not now where you live, I suppose. :slight_smile:

Hi Tech & Hlecter,
Thanks for the replys. Database updated but still blocking the DLL. Ive sent it to virustotal and got the results below. Now I´m confused. ??? The problem is that the company which made it doesnt exist anymore, so there is no way to buy that excelent plugin. :frowning:

http://i276.photobucket.com/albums/kk13/DJLhotse/PrtScr_2.jpg

Hi Lhotse,

AFAIK it is most probably a false positive.

Just to be sure:

Submit to Virus at avast.com in zipped and encrypted format.
Subject can be False positive?
In the body of the mail give the password to the zipped file and a little explanation,
e.g. a pointer to this thread.

Good Luck. :slight_smile:

Ok. Done! I´m waiting the response. Any news I`ll post here. :slight_smile:
Thanks again, hlecter!

Problem solved today guys! :wink: Thanks !