Page 1 of 2

False virus reports by antivirus software

Posted: Thu 12 Mar, 2009 08:56
by MortenMacFly
Just for the record: Avira AntiVir as of today reports a virus a.k.a. trojanic horse ("TR/Crypt.XPACK.Gen") for the file "demangle32.dll" of the FExcept plugin (Far 1.75 RC, build 2543 x86). That is very annoying taking into account that if I setup AntiVir to *ignore* that folder the message still opens every time I start a Far.

As a "work-around" I leave Far open (unless I forget ;-)). But probably you could do something about that (e.g. not packing the DLL?!).

Re: Faulty virus report (Avira)

Posted: Thu 12 Mar, 2009 10:55
by t-rex
Don't use shitty AVs.

Re: Faulty virus report (Avira)

Posted: Thu 12 Mar, 2009 12:38
by Игорь Юдинцев
MortenMacFly
As I realize, demangle32.dll is not packed.

Re: Faulty virus report (Avira)

Posted: Thu 12 Mar, 2009 12:41
by Px
Mail this file to virus@avira.com with mark "False Positive"

Re: Faulty virus report (Avira)

Posted: Tue 28 Apr, 2009 04:43
by Marton
t-rex wrote:Don't use shitty AVs.
Are you sure?
http://www.av-comparatives.org/images/s ... port21.pdf
Which one is the best, for you?

Re: Faulty virus report (Avira)

Posted: Tue 28 Apr, 2009 06:15
by dolzenko
AV software is all wrong anyway. Never used one for the last 5 years or so.

Re: Faulty virus report (Avira)

Posted: Wed 29 Apr, 2009 20:47
by Marton
I agree, personally I never used an AV on my PC. The only infection I ever had was Chernobyl back in '99 and fortunately, I noticed I was infected a few days before the payload.
But being an IT consultant, to my customers I usually recommend the best :D

Re: Faulty virus report (Avira)

Posted: Thu 30 Apr, 2009 08:35
by Centaur
The best antivirus is one’s head. If it’s working, no antivirus is needed. If it’s not, none will help.

Re: Faulty virus report (Avira)

Posted: Tue 05 May, 2009 16:15
by MortenMacFly
I didn't expect such reaction to be honest.
I just wanted to inform you about this issue in case other complain. Then you now it's not your fault.

Concerning AV: I *have* to use it as the computer is not mine, but at work. I hate this AV for it's claims but I cannot do anything about it (like uninstall). All I can say is that I get false alarms regularly. So it's probably not a good solution.

Re: Faulty virus report (Avira)

Posted: Tue 05 May, 2009 17:32
by Px
So mail to Avira that they product produces false alarms :)

Re: Faulty virus report (Avira)

Posted: Tue 05 May, 2009 19:41
by dolzenko
MortenMacFly wrote:I hate this AV for it's claims but I cannot do anything about it (like uninstall).
had the same problems with the moronic Kaspersky AV, googled for "remove kaspersky without password" (the administration part was password protected), found the advice to boot in Safe Mode and rename Kaspersky folder. Worked like charm (sys admin was kinda pissed, but who cares)

Re: Faulty virus report (Avira)

Posted: Thu 28 May, 2009 14:50
by Zeroes
MortenMacFly

Normal AV program have options like Exceptions, try found this options or say to your admin if this corporate AV.
user/admin need say to company about "False Positive".

Re: Faulty virus report (Avira)

Posted: Fri 31 Jul, 2009 12:36
by Joco1114
I use bci for my background copy plugin. If I compile the cpp code with MS Visual Studio, I get same virus warning. But only with MSVS! Maybe is there an option to turn it off?

BTW Avira is the best freeware antivir sw.

Joc

Windows 10 recognises the far.exe file as a Trojan

Posted: Thu 19 May, 2016 10:14
by karlisk4
Since the update a couple days ago Windows 10 Defender blocked the executable as a trojan.
Screenshot below
far.PNG
far.PNG (6.79 KiB) Viewed 11841 times

Windows 10 recognises the far.exe file as a Trojan

Posted: Thu 19 May, 2016 10:18
by karlisk4
I've been using this program since Windows xp and never had problems with it...