False Positives

Latest updates are targeting commercial software… False positives are a work disruption just like a virus… :frowning:

https://www.virustotal.com/en/file/9301cc8b4205901c3795465e4b53b923895298c01c9f791147b3e742561eb118/analysis/1396881845/
https://www.virustotal.com/en/file/5285bd881ca11b3c0be6203d121c9321b9e99b5d3f557eb00355f968d751190f/analysis/1396882001/

You can report a possible FP here: http://www.avast.com/contact-form.php

It seems to be part of a application called WinTam.
Can you confirm that?

Yes.

TAM, WinTAM, The Agency Manager - people call it different things, but that is the app.

Sorry, not to be rude.

A lot of detections are suspicions, not confirmed all the time. So w/o this “disruptions” it would drop the detection ratio a lot. Every AV program has FP’s.

Please do as Asyn suggested.
Report them and avast will look at the files.
If they really are falsely detected (as I strongly suspect), they will solve the problem a.s.a.p.

Yes, but with Avast! it seems to happen with files that really shouldn’t have a FP - as if with an attempt to respond as fast as possible to some other emerging threat, an update was rushed out the door that is a little too broad in it’s detection hit rate. And not having a quick way to restore files that have been quarantined due to a FP, in bulk, in the business product, creates lots of work for my staff whenever this happens.

Eddy, thanks - I did report them every way I know how (including the one in this thread).

Should a fp happen?
I say it is not something we want.
But think of it, there are trillions of different files and it is not possible to check a detection against all those files before releasing a update.
So, yes they will happen.
Personally I rather have a FP than malware. :wink:

+1 8)

As seen in your posted VT links, files are detected with a generic signature

Generic detection will give some FP…
http://www.virusbtn.com/resources/glossary/generic_detection.xml
http://en.m.wikipedia.org/wiki/Zero-day_virus

Avast reports no virus in the files today, so I can confirm that it was a FP and was resolved within 24 hours. The quick turnaround is appreciated.

Thanks for the feedback.