INCREDIMAIL

Viruses and worms
1

I think there is a bug in new avast definitions - They say IncrediMail installer is a Virus? Win32.downloader-BVP

I have used IncrediMail for a long time this is not a virus!!!

2

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.

3

Did that

I am waiting for the reply

4

They usually do not answer back. Just when they need further information.
They answer correcting the false positive at the virus database.

5

Thanks
I will wait until tomorrow to see if it is fixed

6

What about the results from the virustotal upload ?

7

http://www.virustotal.com/he/analisis/75817601deaabe80bb4ce0945f3efb97

9/36 claims it is a virus - which is wrong!!!

This is not a virus

this is the way to install IncrediMail

8

Here is the new scan I made - The other was old report

Only 6 problematic bugged software

http://www.virustotal.com/analisis/578a1b56ffd9def10fffd39224e6baa0

9

False positive in incredimail downloader has been fixed in last VPS 081017-0.

10

Well two of those 6 prefix the name with not-a-virus so that makes 4. So you should send it to avast for further analysis, check the link I gave on reporting, etc. give a link to this topic and the latest VT results URL.

Wow that was fast ;D

11

Great!

Thanks for help DavidR

Eliranushka :wink:

12

You’re welcome, though misak and the virus labs guys were very quick on this.