False virus reports by antivirus software

You have encountered a problem using Far Manager? Here you can get help.
MortenMacFly
Posts: 43
Joined: Wed 30 Apr, 2008 15:31

False virus reports by antivirus software

Post by MortenMacFly » Thu 12 Mar, 2009 08:56

Just for the record: Avira AntiVir as of today reports a virus a.k.a. trojanic horse ("TR/Crypt.XPACK.Gen") for the file "demangle32.dll" of the FExcept plugin (Far 1.75 RC, build 2543 x86). That is very annoying taking into account that if I setup AntiVir to *ignore* that folder the message still opens every time I start a Far.

As a "work-around" I leave Far open (unless I forget ;-)). But probably you could do something about that (e.g. not packing the DLL?!).
Last edited by HaRT on Thu 19 May, 2016 11:52, edited 1 time in total.
Reason: Generalized Topic Subject

User avatar
t-rex
Страшный и ужасный
Posts: 4871
Joined: Tue 15 Mar, 2005 16:17
Location: Tel-Aviv
Contact:

Re: Faulty virus report (Avira)

Post by t-rex » Thu 12 Mar, 2009 10:55

Don't use shitty AVs.

Игорь Юдинцев
Posts: 725
Joined: Sun 03 Apr, 2005 22:00
Location: Казань
Been thanked: 1 time

Re: Faulty virus report (Avira)

Post by Игорь Юдинцев » Thu 12 Mar, 2009 12:38

MortenMacFly
As I realize, demangle32.dll is not packed.

User avatar
Px
Posts: 826
Joined: Fri 08 Sep, 2006 15:52
Location: Вишнёвый (под Киевом)
Contact:

Re: Faulty virus report (Avira)

Post by Px » Thu 12 Mar, 2009 12:41

Mail this file to virus@avira.com with mark "False Positive"

Marton
Posts: 14
Joined: Mon 27 Apr, 2009 06:42

Re: Faulty virus report (Avira)

Post by Marton » Tue 28 Apr, 2009 04:43

t-rex wrote:Don't use shitty AVs.
Are you sure?
http://www.av-comparatives.org/images/s ... port21.pdf
Which one is the best, for you?

dolzenko
Posts: 452
Joined: Wed 19 Apr, 2006 14:42
Location: Ростов-на-Дону

Re: Faulty virus report (Avira)

Post by dolzenko » Tue 28 Apr, 2009 06:15

AV software is all wrong anyway. Never used one for the last 5 years or so.

Marton
Posts: 14
Joined: Mon 27 Apr, 2009 06:42

Re: Faulty virus report (Avira)

Post by Marton » Wed 29 Apr, 2009 20:47

I agree, personally I never used an AV on my PC. The only infection I ever had was Chernobyl back in '99 and fortunately, I noticed I was infected a few days before the payload.
But being an IT consultant, to my customers I usually recommend the best :D

User avatar
Centaur
Posts: 1083
Joined: Tue 05 Apr, 2005 20:09
Location: Novosibirsk, Russia

Re: Faulty virus report (Avira)

Post by Centaur » Thu 30 Apr, 2009 08:35

The best antivirus is one’s head. If it’s working, no antivirus is needed. If it’s not, none will help.

MortenMacFly
Posts: 43
Joined: Wed 30 Apr, 2008 15:31

Re: Faulty virus report (Avira)

Post by MortenMacFly » Tue 05 May, 2009 16:15

I didn't expect such reaction to be honest.
I just wanted to inform you about this issue in case other complain. Then you now it's not your fault.

Concerning AV: I *have* to use it as the computer is not mine, but at work. I hate this AV for it's claims but I cannot do anything about it (like uninstall). All I can say is that I get false alarms regularly. So it's probably not a good solution.

User avatar
Px
Posts: 826
Joined: Fri 08 Sep, 2006 15:52
Location: Вишнёвый (под Киевом)
Contact:

Re: Faulty virus report (Avira)

Post by Px » Tue 05 May, 2009 17:32

So mail to Avira that they product produces false alarms :)

dolzenko
Posts: 452
Joined: Wed 19 Apr, 2006 14:42
Location: Ростов-на-Дону

Re: Faulty virus report (Avira)

Post by dolzenko » Tue 05 May, 2009 19:41

MortenMacFly wrote:I hate this AV for it's claims but I cannot do anything about it (like uninstall).
had the same problems with the moronic Kaspersky AV, googled for "remove kaspersky without password" (the administration part was password protected), found the advice to boot in Safe Mode and rename Kaspersky folder. Worked like charm (sys admin was kinda pissed, but who cares)

User avatar
Zeroes
Мультикопипастер Броадкастер
Posts: 536
Joined: Wed 16 Mar, 2005 20:53
Location: Gomel \ Belarus
Contact:

Re: Faulty virus report (Avira)

Post by Zeroes » Thu 28 May, 2009 14:50

MortenMacFly

Normal AV program have options like Exceptions, try found this options or say to your admin if this corporate AV.
user/admin need say to company about "False Positive".
--- Zeroes & Ones ---

Joco1114
Posts: 23
Joined: Thu 23 Jul, 2009 13:39

Re: Faulty virus report (Avira)

Post by Joco1114 » Fri 31 Jul, 2009 12:36

I use bci for my background copy plugin. If I compile the cpp code with MS Visual Studio, I get same virus warning. But only with MSVS! Maybe is there an option to turn it off?

BTW Avira is the best freeware antivir sw.

Joc

karlisk4
Posts: 2
Joined: Thu 19 May, 2016 10:09

Windows 10 recognises the far.exe file as a Trojan

Post by karlisk4 » Thu 19 May, 2016 10:14

Since the update a couple days ago Windows 10 Defender blocked the executable as a trojan.
Screenshot below
far.PNG
far.PNG (6.79 KiB) Viewed 2059 times

karlisk4
Posts: 2
Joined: Thu 19 May, 2016 10:09

Windows 10 recognises the far.exe file as a Trojan

Post by karlisk4 » Thu 19 May, 2016 10:18

I've been using this program since Windows xp and never had problems with it...

2useven10
Posts: 3045
Joined: Mon 07 Sep, 2009 10:40
Has thanked: 2 times
Been thanked: 83 times

Windows 10 recognises the far.exe file as a Trojan

Post by 2useven10 » Thu 19 May, 2016 10:21

You can choose...
1) Do not use farmanager.
2) Do not use windows defender.
3) Add exception rule.
4) Report false positive to M$.

Post Reply

Return to “Support and Troubleshooting”