false positive ?

system · 2015-08-01T10:09:02.000Z

http://i.imgur.com/kPwUN8s.png

i downloaded the latest rar archive from rar web

http://www.rarlab.com/download.htm

WinRAR x64 (64 bit) 5.30 beta 1

it cant be a virus right ? thanks

Staticguy · 2015-08-01T11:01:28.000Z

It’s definitely a false positive. You can send it to Avast Virus Lab from Virus Chest simply right click it and you will see an option saying Submit to virus lab… and then the application form appears and follow the instructions as mentioned here https://www.avast.com/en-nz/faq.php?article=AVKB21

Pondus · 2015-08-01T12:08:07.000Z

it cant be a virus right ?

Avast detect it as suspicious...... Win32:Evo-gen [ [b]Susp[/b] ] = Suspicious

WinRAR x64 (64 bit) 5.30 beta 1 … maybe not so strange if file is new.
First submission 2015-07-30 10:20:20 UTC ( 2 days, 2 hours ago )
https://www.virustotal.com/en/file/37879c264ca3d22cbc0ea061b98f4f61ea20127718855c9a6f908bd7b9f24344/analysis/1438429802/

Symantec /Norton also think it is suspicious
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight

And next time, use Viruses and Worms forum section for reporting False Positives

Staticguy · 2015-08-01T12:58:10.000Z

This has been corrected now. No detections from Norton/Symantec. I also see Avast has been corrected. https://www.virustotal.com/en/file/37879c264ca3d22cbc0ea061b98f4f61ea20127718855c9a6f908bd7b9f24344/analysis/1438433674/

@prescient: I did a scan of this file with Avast had it didn’t detect any malware or as suspicious file.

Pondus · 2015-08-01T13:00:40.000Z

No detections from Norton/Symantec.

I still see it ..... if you know where to look ;)

Staticguy · 2015-08-01T13:06:13.000Z

The link says no detection for Norton/Symantec. Oh well, must be time difference or something else? Glitch maybe? Maybe Norton is still developing a new malware definition to correct this detection? I even downloaded this file and did a scan by avast of this file. Avast says no detection?

Staticguy · 2015-08-01T13:07:44.000Z

Pondus post:5:

No detections from Norton/Symantec.
I still see it ..... if you know where to look ;)

“I still see it… if you know where to look ;)”. Oh well you the expert not me. If it still says so, then it is very true

Staticguy · 2015-08-01T13:08:48.000Z

LOL pondus I see it. It’s under “Additional Information”… Finally am an expert already

Pondus · 2015-08-01T13:17:58.000Z

I also see Avast has been corrected.

Maybe / maybe not ..... it depends how the Win32:Evo-gen [ Susp ] was detected.

This used to be a on access detection only and was never visible on a VT scan, this has changed, since this is not visible on VT it could be a on access detection or it is fixed

DavidR · 2015-08-01T15:13:39.000Z

Staticguy post:4:

This has been corrected now. No detections from Norton/Symantec. I also see Avast has been corrected. https://www.virustotal.com/en/file/37879c264ca3d22cbc0ea061b98f4f61ea20127718855c9a6f908bd7b9f24344/analysis/1438433674/

@prescient: I did a scan of this file with Avast had it didn’t detect any malware or as suspicious file.

There are many detections that will only be detected by the resident scanner and not the on-demand scanner. Since VT is only using on-demand scanning some might not show up/be detected.

Those detections which are checked against the avast cloud or by deepscreen or possibly HIPS detection, may not be seen/detected by on-demand scans.

system · 2015-08-01T20:41:47.000Z

i didnt want to download beta :

DavidR · 2015-08-01T21:02:25.000Z

prescient post:11:

i didnt want to download beta :

This has nothing to do with this topic.

But to clarify, you get a beta build if you have downloaded and installed a beta version previously. Currently there is no beta trial/version in progress.

I suggest you start your own new topic and expand on your single sentence.

system · 2015-08-02T11:15:30.000Z

what are you talking about ?

this is my thread and i was commenting that the file i downloaded was beta … that is why it wasnt updated yet
when i first download it i though i better get the release one but then i installed the beta anyway
i dont like beta s/w anyway unless i have to

DavidR · 2015-08-02T14:08:13.000Z

Exactly what it said, based solely on your post, which I quoted and replied to.

prescient post:11:

i didnt want to download beta :

Your topic or not, I hadn’t got a clue what you were referring to avast or what, which is why I sought clarification.

system · 2015-08-03T18:14:00.000Z

so i can save you now
my eng language is under the lvl of normal communication sorry

Announcements