Suspected False Positive

Viruses and worms
1

About a week ago I reported a likely false positive via the AVAST interface but have not had a response and I’m quite desperate now to know if I can go ahead and add it to the exclusion list.

The app that was suddenly removed by AVAST after I’d been using it for a few months is called NEF4NX2 (it converts Nikon RAW files off new cameras to work with the older, now discontinued Nikon Capture NX2). It is also blocked when I try to to re-download it from this site:
http://nef4nx2.andomar.de (the Windows version).

Please will someone tell me how I can obtain a decision or some advice on this?

2

You can report a suspected FP here: https://www.avast.com/false-positive-file-form.php

3

Thanks but that doesn’t work. The form via which I am to ask if something is a false positive asks me to attach a file but I can’t do that without first allowing it on my computer as a false positive! It would help if the form provided for a link.

4

You can report a suspected FP here: https://support.avast.com/support/tickets/new?form=3

5

I’m going to try and attach it via the virus chest.

6

Thanks, Asyn.
Finding the Virus Chest in a Windows directory was a dead end. I have now submitted a support ticket via the second link you supplied.
(Interesting user name you have, if one speaks Afrikaans!)
&rew

7

seems avast is not the only one to not like it

https://www.metascan-online.com/#!/results/file/0f9dadc5486e474289cbb281907ece5a/regular

https://www.virustotal.com/en/file/9049b08a3a4967e07141d3a8789b40f62579c0762bb7065518d75f45c46aa962/analysis/1455632522/

8

Yes, I did do the Virustotal scan when I first picked up the problem. Odd that it’s reported as such a wide variety of viruses, and by a minority - 10 to 15% of the antivirus apps.

I’m also trying to draw the attention of the developer to this.

9

It is not a wide of variety.
Vendors are using different names for things.

10

In case you are interested in Malware naming :wink:

https://www.microsoft.com/security/portal/mmpc/shared/malwarenaming.aspx

http://www.symantec.com/connect/articles/virus-any-other-name-virus-naming-practices

11

Thanks for the info re malware naming. Some interesting stuff to learn there. Quite a messy affair it all is.

I think it’s unlikely the file is deliberate malware on the part of the author. The app is a basic one written by a photographer for other photographers in response to a very unique and specific need. If I knew there was very little chance of it becoming infected from the outside then I wouldn’t worry about it and I’d just set AVAST to ignore it.

12
  1. You’re welcome.
  2. Thanks for the info/hint, quite funny.
13

From avast lab

=================================================================
It was a false positive. It should be fixed in the new virus definitions update.
To update virus definition: open Avast and go to > Settings > Update > Virus Definitions - click “Update”

note: if it is still detected, allow some time (up to 24 hrs) and check again

14

Excellent! That is good news. Thank you so much for the quick turnaround!