MalAgent Alert

Avast Free Antivirus / Premium Security
1

Hello,

We use Avast Internet Security 2015 V10.4.2233. A full thorough scan of our computer shows no infected files. However, a file we made available to a customer, is getting blocked with this error message:

Gateway Anti-Virus Alert: This request is blocked by the SonicWALL Gateway Antivirus Service. Name: MalAgent.I_891 (Trojan)

The file in question is an installation executable. We have not experienced this error when installing locally on our computers. Is this a false positive or is there a problem with the file that Avast is not catching? Are there other checks I should perform?

Thanks,
Sally S

2

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here, post the URL in the Address bar of the VT results page.

These type of malware names like MalAgent.I_891 (Trojan), tend to be generic which can be prone to false positive detections. So first I would confirm by inspection as mentioned above.

3

Thank you David. I did as you suggested and here are the results - https://www.virustotal.com/en/file/4fd5940e14dd24dbabcdede685adb2bb33d2121e0695b040a6f558c82e2cdbcf/analysis/1445613773/

It does indeed appear to be a false positive. I also ran MalwareBytes against the computer earlier just to double-check.

Regards,
Sally

4

You’re welcome.

It certainly appears to be an FP, with none of the major AVs detecting it.