Report false positive

Viruses and worms
1

This Windows desktop software is clean, but Avast reports it as Win32:MalwareX-gen [Trj] on VirusTotal, it is a false positive.

https://www.virustotal.com/gui/file/0c62d37c37d4a1b348e31be6b2dd632454d932b38b25702ab281a16a8de5063c?nocache=1

Why doesn’t Avast support team provide an email address for an easy false positive report method ?

Thanks!

2

It is dotted all over this forum a search for reporting a false positive detection I’m sure would turn this up.

Also if this file is on your system avast detects it, you can send it to Quarantine and you should be able to report it from there.

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php.
You should get a response in a day or two.

Given that there are others detecting this on the VT results, it may not be that straight forward.

3
but Avast reports it as Win32:MalwareX-gen [Trj] on VirusTotal
It does not. Your VT scan was old. Always check scan date and refresh if needed. Click on reanalyze above scan date
4

Given the link has ?nocache=1 at the end of the URL, it should be reporting the current status.

5

Interesting.

Above link posted by original poster shows Avast not detecting in the latest scan, done four hours ago. It also shows the file as a trojan and of 6/60 detect it.

6

Now back to 5 out of 59 to detect.

polonus

7

I have recently checked into this (see quote from that topic below) were there are low numbers like this, it seems they are always the same as the VT scan settings are directed by those companies (whom I haven’t really heard of or come across in real life).

EDIT: Something I noticed a while ago.
When I refreshed it again and it is down to only 5 detections and I have also found something that may make a difference to that in the real world (Users).

Hovering over the names/products that do detect it, those that your average user may be unfamiliar with. They give the settings that VT should use in the on-demand scan and may differ with off the shelf/user settings. See attached image.

Note: I haven’t been able to replicate this in this instance, but for me it is likely to reduce the instances found by regular users.