WINRAR FALSE POISITIVE PUP and win32:dropper-gen

Avast Free Antivirus / Premium Security
1

Another still time!
Winrar 5.21 installer downloaded from official site www.winrar.it detected from avast such as P.U.P. and win32:dropper-gen

Winrar.exe detected such as P.U.P…!!!
see: https://www.winrar.it/prelievo.php

:frowning:

2

Report as false positive directly via Avast GUI by following this https://www.avast.com/en-nz/faq.php?article=AVKB21#artTitle and click on “Submitting files from the Virus Chest to Avast Virus Lab” and follow the instructions.

3

PUP is not necessarily a FP … It just tell you that it comes bundled with some crap, very common with freeware downloads

Upload and test file at www.virustotal.com if tested before, click rescan for fresh result
Post link to scan result

4

Dear Pondus, winrar.it is the official partner of rarlab.com or better than “win.rar GmbH” then Alexander L. Roshal creator of Winrar.
So I know what I say.
You can see that I have not only written PUP but also win32: dropper-gen.
So if Avast detects a false malware and slams him in his trash Avast breaking my balls.
Finally, remember that Virustotal is not the solution to all ills and that proactive and heuristics detections made by other anti-virus engines can fail in the assessment as much as Avast.
Thanks. :wink: :wink:

5

Here I got the Metascan report on that download:
https://www.metascan-online.com/en/scanresult/file/9abae266f07b4421b8445f36dc728f88
More ground to fear a FP.

polonus

6

Hello,
thanks for notice. FP will be fixed in next stream update.

Milos

7

Thanks a lot.
:wink: :wink: :wink:

8
You can see that I have not only written PUP but also win32: dropper-gen.
yes and i was commenting on PUP .... as you can see
Dear Pondus, winrar.it is the official partner of rarlab.com or better than "win.rar GmbH" then Alexander L. Roshal creator of Winrar. So I know what I say.
that does not mean they dont bundel the installer with PUP ...many software vendors do
Finally, remember that Virustotal is not the solution to all ills and that proactive and heuristics detections made by other anti-virus engines can fail in the assessment as much as Avast. Thanks
i am very aware of that, it was to check if others also said it was bundled with PUP

No PUP detection
https://www.virustotal.com/en/file/69299a7b4a88167c863ccdd41cab9aedbc6d4e6c4daa3b0d8aeda6cf2117808d/analysis/1424869799/
https://www.virustotal.com/en/file/bb6e1a7695c0bc673a4b6069558bb96689d44628b681e57a339128c5d9e6999e/analysis/1424869894/