Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
AVG False Positive Detection
09-06-2011, 10:27 PM
Post: #1
AVG False Positive Detection
AVG is reporting false positive detection on both HWInfo32 & 64 installers.
After repeated Ignores, it will install. On the 64 machine, I changed to MSE. I will keep the WinXP-32 machines with AVG, for now.
If the downloaded file is scanned with AVG, there is no false positive detection. I know it's a false detection & so does Martin. AVG was previously informed, they have not implemented a fix.

I suggest the following rewording: "Some antiviruses may report a suspicious component in the package, but this is a false alarm. Each HWiNFO32 release is checked against viruses, trojans, malware and spyware and is guaranteed to be clean. AVG will report the Self-installing EXE as a threat; Ignore it & keep ignoring it until it finally installs."

http://forums.avg.com/ww-en/avg-forums?s...how&id=395
Find all posts by this user
Quote this message in a reply
09-07-2011, 06:26 AM
Post: #2
RE: AVG False Positive Detection
Thanks for the information, this is definitively a false alarm which should be fixed by AVG. The installer is based on widely used freeware InnoSetup, so AVG should already have lots of false reports. I'll try to resubmit this issue.
Visit this user's website Find all posts by this user
Quote this message in a reply
09-07-2011, 07:42 AM
Post: #3
RE: AVG False Positive Detection
I just got feedback from AVG (pretty fast support must I say):


Subject: Case AVG#0003728001: [ ref:00D4000000086fU.5004000000GOFiQ:ref ] RE: False detesction

Dear Martin,

Thank you for your e-mail.

We tried to download self-installing EXE version of HWiNFO32 (v3.86-1370) and HWiNFO64 (v3.86-1370) from the link you provided us and was able to download it without any problem. Kindly inform your users to update their AVG and see if it fixes the problem.

Thank you for your cooperation.

Best regards,

Catherine Feliciano
AVG Customer Services
http://www.avg.com
Visit this user's website Find all posts by this user
Quote this message in a reply
09-07-2011, 12:50 PM
Post: #4
RE: AVG False Positive Detection
(09-07-2011 07:42 AM)Martin Wrote:  ...We tried to download self-installing EXE version of HWiNFO32 (v3.86-1370) and HWiNFO64 (v3.86-1370) from the link you provided us and was able to download it without any problem....
This response does not address the problem. There is no false positive when trying to download. The false positive occurs when attempting to perform the installation.
Find all posts by this user
Quote this message in a reply
09-07-2011, 01:05 PM
Post: #5
RE: AVG False Positive Detection
I see, okay, I'll forward this to the AVG support team.
Can you please make a screenshot where it's visible?
Visit this user's website Find all posts by this user
Quote this message in a reply
09-07-2011, 02:08 PM
Post: #6
RE: AVG False Positive Detection
New response from AVG:
----------------------------
We would like to inform you that we download the software from the mentioned link, but we regret to say that we could not induce detection.

If possible please zip up infected files which AVG detected and attach it to this e-mail for prompt analysis. Also, we would like to request from you to provide us, the exact method on how we can induce detection, and send us the screenshot that shows the exact component which falsely detecting the software so we can do some further analysis.

With your cooperation and support, the outcome will help us address the problem effectively.
Visit this user's website Find all posts by this user
Quote this message in a reply
09-07-2011, 09:15 PM (This post was last modified: 09-07-2011 09:18 PM by Cmp_Cmndo.)
Post: #7
RE: AVG False Positive Detection
(09-07-2011 01:05 PM)Martin Wrote:  I see, okay, I'll forward this to the AVG support team.
Can you please make a screenshot where it's visible?

The false positive occurs when attempting to perform the installation from the C:\!Downloads folder where it was downloaded to.


Attached File(s) Thumbnail(s)
   
Find all posts by this user
Quote this message in a reply
09-07-2011, 09:53 PM
Post: #8
RE: AVG False Positive Detection
I see you used v3.84 of HWiNFO32. Does the same happen with the latest v3.86 ?
Visit this user's website Find all posts by this user
Quote this message in a reply
09-08-2011, 12:11 AM (This post was last modified: 09-08-2011 12:17 AM by Cmp_Cmndo.)
Post: #9
RE: AVG False Positive Detection
(09-07-2011 09:53 PM)Martin Wrote:  I see you used v3.84 of HWiNFO32. Does the same happen with the latest v3.86 ?
Yes, I just happened to have the pic of that one. Since v3.86 is now installed on all 3 of my computers (2 with AVG).

I downloaded v3.86 from your website & the same AVG message flashed on the screen, just for a second during the download & then went away. This machine is using WinXP & Firefox 6.02. Another one is using WinXP & IE8. The 3rd is Win7-64 with FF 6.02.

As soon as I click on downloaded file, the message reappears. I captured it here. As long as I don't click on "Move to Vault" or "Ignore", the Threat Detected windows stays open & I can move it around the screen. Can't close it without clicking on one of the two choices.

Only happens with the EXE, not the ZIP.


Attached File(s) Thumbnail(s)
   
Find all posts by this user
Quote this message in a reply
09-08-2011, 09:05 AM
Post: #10
RE: AVG False Positive Detection
It seems AVG acknowledged this problem and will fix it. This is the latest feedback from them:
----------------

Unfortunately, the previous virus database might have detected the mentioned virus in some legitimate applications. After a lot of efforts and analysis, we can confirm that this was a false alarm. We will release a new virus update removing the false positive detection of the mentioned file. Please update your AVG as described in FAQ 3271:
http://www.avg.com/faq?num=3271

When the update is completed, AVG will automatically restore the falsely detected file from the AVG Virus Vault to its original location.

We apologize for any inconvenience.
Visit this user's website Find all posts by this user
Quote this message in a reply
09-08-2011, 11:43 AM
Post: #11
RE: AVG False Positive Detection
Update from AVG:
The next update is planned to be released after 23:00 CEST today.
Visit this user's website Find all posts by this user
Quote this message in a reply
09-08-2011, 05:26 PM (This post was last modified: 09-08-2011 05:27 PM by Cmp_Cmndo.)
Post: #12
RE: AVG False Positive Detection
(09-08-2011 11:43 AM)Martin Wrote:  Update from AVG:
The next update is planned to be released after 23:00 CEST today.
Seems to be fixed ahead of schedule. Downloaded and reinstalled v3.86-1370, no threat detected.
Find all posts by this user
Quote this message in a reply
09-08-2011, 06:24 PM
Post: #13
RE: AVG False Positive Detection
Great. Thanks for your feedback.
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)