Faux positif avec SFT

Bonsoir,

J’ai développé un utilitaire permettant de supprimer les fichiers temporaires inutiles.
Cet utilitaire est considéré infectieux par votre Anti virus…
Il ne l’est pourtant pas avec l’analyse par Virus Total
Si vous voulez analyser: [url=http://Télécharger SFT.exe]Télécharger SFT.exe[/url]

Merci.

Modification (lien non cliquable)

There is an specific French board. Please post there or here, in English :slight_smile:

Until we get clarification and confirmation of it’s safety,
The link to the Telecharger.exe file needs to be made no-clickable.

(Reported to Moderator)

Break link to the download of the executable. It is packed with AUTOIT and ASCRIPT raising suspicion.
Here it is listed as suspicious also: http://wepawet.iseclab.org/view.php?hash=0e9346c9292bbe3ebd855a9768f5bc50&t=1347658750&type=js
Not only avast to flag it: https://www.virustotal.com/file/18c560e519c1809766a447ca7d53e9e89ed21ac41660eb840cfc22ab8df49115/analysis/

polonus

@Polonus

see the VT scan the OP posted and you posted have different MD5
MD5 d6903db30095ed32070b95d87501db4f
MD5 e06041b86d4a4ec82df38ec60d229e2c

Norman lab

SFT.exe: Not Detected MD5 MD5 E06041B86D4A4EC82DF38EC60D229E2C - No malicious activity found.

ThreatExpert
http://www.threatexpert.com/report.aspx?md5=e06041b86d4a4ec82df38ec60d229e2c

Hello,

The following usage statistics SFT.

Excuse my English

thank you

Hello,

I confirm that the program “SFT”, developed on a small scale by Pierre13, is often used for the removal of temporary files on some French forums (especially on our forum) after disinfection of the computer.
Unfortunately, Avast deletes immediately, which is very annoying … and requires us to disable Avast.
Avast antivirus is the only antivirus that reacts this way.
What decision do you take?

Thank you to study the problem

Sorry for my english (translation with Google…).

Best regards

When you have the file in avast chest, right click it and upload to avast lab as false positive
it will then be sendt at next update …or at once if you do a manuall update

you may add a link to this topic

Ok thanks.
We’ll do that.

Hello

Quarantined file sent to the laboratory Avast.

Best Regards.

Hello
We are always annoyed by this false positive.
What is your reaction about this ?

No response to this request?
that it happens on this forum?

Hello,

Why our requests remain unanswered?
We inform you of a false positive and nothing is done.
It’s a shame…
Our users have tried to report the false positive as requested but it is impossible.
Can you help us?
Thank you in advance