False virus reports by antivirus software

You have encountered a problem using Far Manager? Here you can get help.
2useven10
Posts: 4072
Joined: Mon 07 Sep, 2009 10:40
Has thanked: 5 times
Been thanked: 189 times

Windows 10 recognises the far.exe file as a Trojan

Post by 2useven10 »

Latest post of the previous page:

You can choose...
1) Do not use farmanager.
2) Do not use windows defender.
3) Add exception rule.
4) Report false positive to M$.
2useven10
Posts: 4072
Joined: Mon 07 Sep, 2009 10:40
Has thanked: 5 times
Been thanked: 189 times

Windows 10 recognises the far.exe file as a Trojan

Post by 2useven10 »

There is separate thread about that (mostly in russian) -- http://forum.farmanager.com/viewtopic.php?f=1&t=1234
pepak
Posts: 474
Joined: Sun 13 Jul, 2008 11:18
Has thanked: 12 times
Been thanked: 36 times

False virus reports by antivirus software

Post by pepak »

Unfortunately, antivirus companies have reached the conclusion that it is better to raise false alarms than to be precise: A false positive costs them nothing, the whole price is paid by the affected developer, while a missing detection can be seen by their customers as a problem. Unfortunately, there is little a developer can do about it - even if he reports a false positive and even if the antivirus company acts on that report, it will simply return the detection at their earliest convenience.
helzayat
Posts: 2
Joined: Fri 09 Aug, 2019 18:39

Avast flags part of FARManager as malware

Post by helzayat »

Avast (version 19.6.2383 (build 19.6.4546.514)) blocks Far Manager v3.0 build 5445 x64 (2019-08-07) with message that MSI2EA3.tmp is infected with Win64:Malware-gen. Installation fails of course, with message that a DLL required could not be run.
Is it OK to report this as false positive?
User avatar
HaRT
Moderator
Posts: 9529
Joined: Tue 30 Aug, 2005 17:21
Location: Санкт-Петербург
Has thanked: 109 times
Been thanked: 228 times

False virus reports by antivirus software

Post by HaRT »

helzayat wrote: Fri 09 Aug, 2019 18:45 Is it OK to report this as false positive?
Absolutely! Please also see what other AVs report, e.g. at virustotal.com.
Фар есть инструмент, а не нянька. © 2009 DrKnS
helzayat
Posts: 2
Joined: Fri 09 Aug, 2019 18:39

False virus reports by antivirus software

Post by helzayat »

Letting Avast scan the FARManager installer it gives "Binary.CustomActions.dll" as the problem with Win64-Malware-gen.
virustotal . com result:

AegisLab Trojan.Win32.Generic.4!c
AVG Win64:Evo-gen [Susp]
Qihoo-360 Win32/Trojan.7be
Zillya Trojan.Generic.Win32.675847
User avatar
DrKnS
Posts: 5673
Joined: Thu 04 Aug, 2005 06:44
Location: Kyiv
Has thanked: 9 times
Been thanked: 311 times

False virus reports by antivirus software

Post by DrKnS »

helzayat wrote: Fri 09 Aug, 2019 18:54 it gives "Binary.CustomActions.dll"
Just in case, its source is here: https://github.com/FarGroup/FarManager/ ... tomact.cpp
No idea what those paranoids found there.

You can always try 7z packages (without the installer) or Github Releases.

In general, please don't wait for our approval and report straight away.
Post Reply

Return to “Support and Troubleshooting”