JS:Pdfka-gen False Positives

HI,

I had several JS:Pdfka-gen False Positives today.
I send one example inside a password protected ZIP to virus@avast.com this morning, but didn’t got any response.
What is the right way to report them to Avast?

Greetings

Frank

avast support https://support.avast.com > avast virus lab

have you testet the file(s) at www.virustotal.com / www.metascan-online.com if tested before, click rescan for a fresh result
you may post link to scan result here

Yes I have done a check on Virustotal first and the file was only marked as Virus from Avast
Today I still get the same result
https://www.virustotal.com/de/file/fd267577e499980a51828f2dd74eb36fd1513ef7773c959cf34d411e013b1492/analysis/1431409839/
On Metascan I didn’t find any problem
https://www.metascan-online.com/en/scanresult/file/5cf1505035694731a4b19fc3c183c7f3

OK. I opened now a ticket over https://support.avast.com > avast virus lab

Thks

Hello,
thank you for the files. FP should be fixed now.

Milos

Hi Frank122,
I received your email, and forwarded it to the person responsible for the detection. It was fixed in today’s morning VPS (150512-0).
Please note that virus@avast.com is just an “incoming” email, which means we do not usually respond to each and every one of the submissions unless we are missing some crucial data, which was not your case.

Can you please post the ticketID here so I can close the ticket?

Hi,

Thanks for the information. Since yesterday 09:15 I can’t see any new False Positives anymore.
I opened two tickets
XPV-965-28079
AES-426-21812
So what is the preferred way to submit such thinks to Avast? I guess it is to open a ticket?
What about new Virus examples. Should I send them to virus@avast.com?
Greetings
Frank

Hi Frank,
Nice to hear there are no more FPs.

The preferred way depends entirely on you.

  • Submitting a ticket via support.avast.com: You submit a ticket, which then goes to support department to be examined, and if the issue is confirmed, they reply to you and at the same time assign the ticket to us (folks from viruslab). Then we analyze the problem, solve it and forward it back to support (at this time, the problem is solved). Then gyus from support reply to you about the outcome.
  • If you write to virus@avast.com, the email is seen immediately by us. In the best case scenario, the issue is solved more quickly. The drawbacks of this second approach are obvious: 1. we do not usually reply to the customer, so you do not know if the issue has been noted or solved, 2. sometimes the email is sent to spam (or overlooked and deleted), 3. if google translator fails us, we need to send the email to support (create a ticket) anyway, to get it translated.

Any additional questions, please let me know.
Honza