Mess patch FP?

Hey guys,

Not sure if anyone knows about the ‘Mess Patch’ for MSN Messenger aka mess.be; http://www.mess.be/ - avast! is reporting that it shows signs of “Win32:Black-P” I uploaded it to Virus total and only avast! and two others show this as a virus; http://www.virustotal.com/analisis/576e7dd2ce4c0c0688ae3966567dbc51 - does anyone have the email address as to where I should email this to for avast! to take a look?

Thanks. :slight_smile:

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic, the URL for the VT results might help and false positive in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already there) where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.

Not so sure… sometimes avast is the very first one to detect… mostly, false positives…