False virus reports by antivirus software

You have encountered a problem using Far Manager? Here you can get help.
2useven10
Posts: 3983
Joined: Mon 07 Sep, 2009 10:40
Has thanked: 4 times
Been thanked: 173 times

Windows 10 recognises the far.exe file as a Trojan

Post by 2useven10 » Thu 19 May, 2016 10:21

Latest post of the previous page:

You can choose...
1) Do not use farmanager.
2) Do not use windows defender.
3) Add exception rule.
4) Report false positive to M$.

2useven10
Posts: 3983
Joined: Mon 07 Sep, 2009 10:40
Has thanked: 4 times
Been thanked: 173 times

Windows 10 recognises the far.exe file as a Trojan

Post by 2useven10 » Thu 19 May, 2016 10:24

There is separate thread about that (mostly in russian) -- http://forum.farmanager.com/viewtopic.php?f=1&t=1234

pepak
Posts: 444
Joined: Sun 13 Jul, 2008 11:18
Has thanked: 9 times
Been thanked: 25 times

False virus reports by antivirus software

Post by pepak » Thu 19 May, 2016 17:04

Unfortunately, antivirus companies have reached the conclusion that it is better to raise false alarms than to be precise: A false positive costs them nothing, the whole price is paid by the affected developer, while a missing detection can be seen by their customers as a problem. Unfortunately, there is little a developer can do about it - even if he reports a false positive and even if the antivirus company acts on that report, it will simply return the detection at their earliest convenience.

helzayat
Posts: 2
Joined: Fri 09 Aug, 2019 18:39

Avast flags part of FARManager as malware

Post by helzayat » Fri 09 Aug, 2019 18:45

Avast (version 19.6.2383 (build 19.6.4546.514)) blocks Far Manager v3.0 build 5445 x64 (2019-08-07) with message that MSI2EA3.tmp is infected with Win64:Malware-gen. Installation fails of course, with message that a DLL required could not be run.
Is it OK to report this as false positive?

User avatar
HaRT
Moderator
Posts: 9159
Joined: Tue 30 Aug, 2005 17:21
Location: Санкт-Петербург
Has thanked: 90 times
Been thanked: 174 times

False virus reports by antivirus software

Post by HaRT » Fri 09 Aug, 2019 18:49

helzayat wrote:
Fri 09 Aug, 2019 18:45
Is it OK to report this as false positive?
Absolutely! Please also see what other AVs report, e.g. at virustotal.com.
Фар есть инструмент, а не нянька. © 2009 DrKnS

helzayat
Posts: 2
Joined: Fri 09 Aug, 2019 18:39

False virus reports by antivirus software

Post by helzayat » Fri 09 Aug, 2019 18:54

Letting Avast scan the FARManager installer it gives "Binary.CustomActions.dll" as the problem with Win64-Malware-gen.
virustotal . com result:

AegisLab Trojan.Win32.Generic.4!c
AVG Win64:Evo-gen [Susp]
Qihoo-360 Win32/Trojan.7be
Zillya Trojan.Generic.Win32.675847

User avatar
DrKnS
Posts: 5430
Joined: Thu 04 Aug, 2005 06:44
Location: Kyiv
Has thanked: 6 times
Been thanked: 251 times

False virus reports by antivirus software

Post by DrKnS » Fri 09 Aug, 2019 23:19

helzayat wrote:
Fri 09 Aug, 2019 18:54
it gives "Binary.CustomActions.dll"
Just in case, its source is here: https://github.com/FarGroup/FarManager/ ... tomact.cpp
No idea what those paranoids found there.

You can always try 7z packages (without the installer) or Github Releases.

In general, please don't wait for our approval and report straight away.

Post Reply

Return to “Support and Troubleshooting”