Win32: trojan gen/other on Keepass password manager setup file

system · 2008-01-13T22:32:19.000Z

Hi guys!

after today’s update, Avast detected this file, Keepass 1.10-Setup.exe as a virus. I’ve been using this password manager for years now and never had a problem with it. Nor did I have a previous virus detection on it. I downloaded it yesterday (new version) and nothing was detected then by Avast.
After today’s alert, I’ve scanned it with BitDefender that detects nothing. On the other hand I submitted the file to Virus Total where the file had already been analysed with the result that only PrevX detects it as a virus.

I’m almost sure it’s a false positive, but I can’t find a way to exlude it from Avast. I put it already in the exclusion list of the on demand scanner (in the general options) and also in the exclusion list of the standard shield, but it keeps being detected as a virus. Thanks for your help.

Scanning the installation folder under program files gives no sign of virus activity.

Lisandro · 2008-01-14T00:10:52.000Z

http://forum.avast.com/index.php?topic=32651 also relates this.

Check if you did it correctly to add to the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button…

For the other providers (on-demand scanning such as the screen-saver or the Simple User Interface):
Right click the ‘a’ blue icon, click Program Settings.
Go to Exclusions tab and click on Add button…

You can use wildcards like * and ?.
But be careful, you should ‘exclude’ that many files that let your system in danger.

Hope they correct this false positive soon.

system · 2008-01-14T00:18:54.000Z

thanks a lot for your answer. I already feel relieved now that you confirm it’s a false positive. As you’ve probably noticed, this software is a password manager and that would have been really annoying. I’ve put the setup file in a locked archive and it will remain there until Avast database is updated.

Lisandro · 2008-01-14T14:03:47.000Z

Hermite15 post:3:

I’ve put the setup file in a locked archive and it will remain there until Avast database is updated.

Good. By the way, very good free password manager

system · 2008-01-14T14:52:36.000Z

Unable to follow your directions so I will also have to postpone downloading the latest KeePass 1.10 until a new Avast! definition database come out. I’m quite sure it is a false positive.
Checked through VirusTotal:
http://www.virustotal.com/analisis/0dbf37f05d0cbc3dbc96a47190a91b1e

Have used several previous versions of KeePass with no problems. Even the zipped 1.10 for USB sticks installs ok.

Thanks.
Beau

system · 2008-01-14T14:57:51.000Z

beaulanger post:5:

Unable to follow your directions so I will also have to postpone downloading the latest KeePass 1.10 until a new Avast! definition database come out. I’m quite sure it is a false positive.
Checked through VirusTotal:
http://www.virustotal.com/analisis/0dbf37f05d0cbc3dbc96a47190a91b1e

Have used several previous versions of KeePass with no problems. Even the zipped 1.10 for USB sticks installs ok.

Thanks.
Beau

it shouldn’t be a problem to deactivate your antivirus during 5 small minutes: time to download Keepass, to install it, then put the setup file into an archive (and locked), and finally reactivate Avast. The program files from Keepass are not affected by the false detection.

system · 2008-01-14T15:09:04.000Z

OK issue solved for me with the last update a few minutes ago, Keepass is now seen as safe by Avast. Thanks guys!

system · 2008-01-14T16:00:46.000Z

Yup, same here.
Beau

Hermite15 post:7:

OK issue solved for me with the last update a few minutes ago, Keepass is now seen as safe by Avast. Thanks guys!

Announcements