False Positive?

[Brickstin]

M:\e300\IBM\C\Program Files\Electronic Arts\The Sims Pet Stories\eauninstall.exe
Win32:Malware-gen
VPS Version
140823-0, 08/23/2014

I would like to submit this executable for study… Granted it is a old application still. I am shocked that with the latest VPS database… it’s detecting this EXE as a malware Generator… This coming from Electronic Arts.

Just let me know when to edit this message I can add an attachment for Mods to study.

Thanks in advance,
Brickstin

[Asyn]

You can report a possible FP here: http://www.avast.com/contact-form.php

[Pondus]

I am shocked that with the latest VPS database.. it's detecting this EXE as a [b]malware Generator[/b]...

Win32:Malware-[b]gen[/b] = Generic detection https://www.virusbtn.com/resources/glossary/generic_detection.xml

Zero-day virus http://en.wikipedia.org/wiki/Zero-day_virus

Generic signatures[edit] Generic signatures are signatures that are specific to certain behaviour rather than a specific item of malware. Most new malware is not totally novel, but is a variation on earlier malware, or contains code from one or more earlier examples of malware. Thus the results of previous analysis can be used against new malware.

[polonus]

More guidelines: http://www.shouldiremoveit.com/The-Sims-2-University-Life-Collection-71103-program.aspx
and http://www.pliki.info/plik-eauninstall-exe/ & http://www.filehelp.info/dll/eauninstall-exe

polonus

[Brickstin]

Sent! Thanks

@Pondus post:3

I am shocked that with the latest VPS database.. it's detecting this EXE as a [b]malware Generator[/b]...

Win32:Malware-[b]gen[/b] = Generic detection https://www.virusbtn.com/resources/glossary/generic_detection.xml

Zero-day virus http://en.wikipedia.org/wiki/Zero-day_virus

Generic signatures[edit] Generic signatures are signatures that are specific to certain behaviour rather than a specific item of malware. Most new malware is not totally novel, but is a variation on earlier malware, or contains code from one or more earlier examples of malware. Thus the results of previous analysis can be used against new malware.

[Brickstin]

Very Educational Information Thank you!

@Pondus post:3

I am shocked that with the latest VPS database.. it's detecting this EXE as a [b]malware Generator[/b]...

Win32:Malware-[b]gen[/b] = Generic detection https://www.virusbtn.com/resources/glossary/generic_detection.xml

Zero-day virus http://en.wikipedia.org/wiki/Zero-day_virus

Generic signatures[edit] Generic signatures are signatures that are specific to certain behaviour rather than a specific item of malware. Most new malware is not totally novel, but is a variation on earlier malware, or contains code from one or more earlier examples of malware. Thus the results of previous analysis can be used against new malware.

[Brickstin]

Some useful information thanks but I cant figure out what language http://www.pliki.info/plik-eauninstall-exe/ is

That looks like… Romanian… or something… or … idk… lol

I don’t understand it

BTW I tried http://www.filehelp.info/dll/eauninstall-exe

and found my Uninstall file but… it still detects a general Virus… I read up on some of the links you guys provided me… IT could more then likely be a false positive because of digital signature issues:

I will see what Avast says!

@polonus post:4

More guidelines: http://www.shouldiremoveit.com/The-Sims-2-University-Life-Collection-71103-program.aspx
and http://www.pliki.info/plik-eauninstall-exe/ & http://www.filehelp.info/dll/eauninstall-exe

polonus

[mchain]

@Brickstin post:7

Some useful information thanks but I cant figure out what language http://www.pliki.info/plik-eauninstall-exe/ is

That looks like… Romanian… or something… or … idk… lol

I don’t understand it

BTW I tried http://www.filehelp.info/dll/eauninstall-exe

and found my Uninstall file but… it still detects a general Virus… I read up on some of the links you guys provided me… IT could more then likely be a false positive because of digital signature issues:

I will see what Avast says!

@polonus post:4

More guidelines: http://www.shouldiremoveit.com/The-Sims-2-University-Life-Collection-71103-program.aspx
and http://www.pliki.info/plik-eauninstall-exe/ & http://www.filehelp.info/dll/eauninstall-exe

polonus

Use Google Translate for detecting language used. See attached below:

Type in "Google Translate’ in the general Google web page w/o quotes; Google Chrome offers direct translation without this extra step.