Page 1 of 1

Avira producing false positives!

Posted: Tue Feb 01, 2011 12:50 pm
by Didelphodon
@Purebasic-Team: We have a major problem these days. I used Purebasic for a security-tool which we made publicly available. Now we found out that ie. Avira produces false positives according to the tool propagating that it's a trojan. The problem is that this has a major impact regarding our standing in the it-security- and CERT-community. I know that this is not the fault of PB but it should definitely be in your scope to have this problem solved as soon as positive as might spread some really shady light on pb-binaries. I have to mention that the regarding executables has been compiled with an older (not ancient!) version of pb, so it might not be the case in the actual state of pb. However, for study's, you'll find our binaries under http://cert.at/static/downloads/softwar ... _29_29.zip (the "bad" exe's are sleep.exe and minimize.exe).

The next thing I will do is to compile with the actual state of pb and crosscheck if Avira still reacts but I just haven't got time yet, as I firstly have to do some public explanations, as we just hit malwareurl.com :-(

Cheers,
Didel.

Re: Avira producing false positives!

Posted: Tue Feb 01, 2011 1:18 pm
by PMV
The only thing you can do is, send it to avira ... and they
will check and correct it (in most/all cases i read)

MFG PMV

Re: Avira producing false positives!

Posted: Tue Feb 01, 2011 1:19 pm
by Rings
Its not a Purebasic-problem, neither a bug
(that is why i moved this topic)

we have same problems here at work with false alarms,
i prefer informing those companys about it:

http://analysis.avira.com/samples/index.php


http://www.virustotal.com/index.html