False virus reports by antivirus software

You have encountered a problem using Far Manager? Here you can get help.
MortenMacFly
Posts: 45
Joined: Wed 30 Apr, 2008 15:31
Has thanked: 1 time

False virus reports by antivirus software

Post by MortenMacFly »

Just for the record: Avira AntiVir as of today reports a virus a.k.a. trojanic horse ("TR/Crypt.XPACK.Gen") for the file "demangle32.dll" of the FExcept plugin (Far 1.75 RC, build 2543 x86). That is very annoying taking into account that if I setup AntiVir to *ignore* that folder the message still opens every time I start a Far.

As a "work-around" I leave Far open (unless I forget ;-)). But probably you could do something about that (e.g. not packing the DLL?!).
Last edited by HaRT on Thu 19 May, 2016 11:52, edited 1 time in total.
Reason: Generalized Topic Subject
User avatar
t-rex
Страшный и ужасный
Posts: 4910
Joined: Tue 15 Mar, 2005 16:17
Location: Tel-Aviv
Has thanked: 1 time
Been thanked: 8 times
Contact:

Re: Faulty virus report (Avira)

Post by t-rex »

Don't use shitty AVs.
Игорь Юдинцев
Posts: 726
Joined: Sun 03 Apr, 2005 22:00
Location: Казань
Been thanked: 2 times

Re: Faulty virus report (Avira)

Post by Игорь Юдинцев »

MortenMacFly
As I realize, demangle32.dll is not packed.
User avatar
Px
Posts: 826
Joined: Fri 08 Sep, 2006 15:52
Location: Вишнёвый (под Киевом)
Contact:

Re: Faulty virus report (Avira)

Post by Px »

Mail this file to virus@avira.com with mark "False Positive"
Marton
Posts: 18
Joined: Mon 27 Apr, 2009 06:42

Re: Faulty virus report (Avira)

Post by Marton »

t-rex wrote:Don't use shitty AVs.
Are you sure?
http://www.av-comparatives.org/images/s ... port21.pdf
Which one is the best, for you?
dolzenko
Posts: 452
Joined: Wed 19 Apr, 2006 14:42
Location: Ростов-на-Дону

Re: Faulty virus report (Avira)

Post by dolzenko »

AV software is all wrong anyway. Never used one for the last 5 years or so.
Marton
Posts: 18
Joined: Mon 27 Apr, 2009 06:42

Re: Faulty virus report (Avira)

Post by Marton »

I agree, personally I never used an AV on my PC. The only infection I ever had was Chernobyl back in '99 and fortunately, I noticed I was infected a few days before the payload.
But being an IT consultant, to my customers I usually recommend the best :D
User avatar
Centaur
Posts: 1083
Joined: Tue 05 Apr, 2005 20:09
Location: Novosibirsk, Russia
Been thanked: 2 times

Re: Faulty virus report (Avira)

Post by Centaur »

The best antivirus is one’s head. If it’s working, no antivirus is needed. If it’s not, none will help.
MortenMacFly
Posts: 45
Joined: Wed 30 Apr, 2008 15:31
Has thanked: 1 time

Re: Faulty virus report (Avira)

Post by MortenMacFly »

I didn't expect such reaction to be honest.
I just wanted to inform you about this issue in case other complain. Then you now it's not your fault.

Concerning AV: I *have* to use it as the computer is not mine, but at work. I hate this AV for it's claims but I cannot do anything about it (like uninstall). All I can say is that I get false alarms regularly. So it's probably not a good solution.
User avatar
Px
Posts: 826
Joined: Fri 08 Sep, 2006 15:52
Location: Вишнёвый (под Киевом)
Contact:

Re: Faulty virus report (Avira)

Post by Px »

So mail to Avira that they product produces false alarms :)
dolzenko
Posts: 452
Joined: Wed 19 Apr, 2006 14:42
Location: Ростов-на-Дону

Re: Faulty virus report (Avira)

Post by dolzenko »

MortenMacFly wrote:I hate this AV for it's claims but I cannot do anything about it (like uninstall).
had the same problems with the moronic Kaspersky AV, googled for "remove kaspersky without password" (the administration part was password protected), found the advice to boot in Safe Mode and rename Kaspersky folder. Worked like charm (sys admin was kinda pissed, but who cares)
User avatar
Zeroes
Мультикопипастер Броадкастер
Posts: 569
Joined: Wed 16 Mar, 2005 20:53
Location: Gomel \ Belarus
Has thanked: 1 time
Been thanked: 3 times
Contact:

Re: Faulty virus report (Avira)

Post by Zeroes »

MortenMacFly

Normal AV program have options like Exceptions, try found this options or say to your admin if this corporate AV.
user/admin need say to company about "False Positive".
--- Zeroes & Ones ---
Joco1114
Posts: 23
Joined: Thu 23 Jul, 2009 13:39

Re: Faulty virus report (Avira)

Post by Joco1114 »

I use bci for my background copy plugin. If I compile the cpp code with MS Visual Studio, I get same virus warning. But only with MSVS! Maybe is there an option to turn it off?

BTW Avira is the best freeware antivir sw.

Joc
karlisk4
Posts: 2
Joined: Thu 19 May, 2016 10:09

Windows 10 recognises the far.exe file as a Trojan

Post by karlisk4 »

Since the update a couple days ago Windows 10 Defender blocked the executable as a trojan.
Screenshot below
far.PNG
far.PNG (6.79 KiB) Viewed 11798 times
karlisk4
Posts: 2
Joined: Thu 19 May, 2016 10:09

Windows 10 recognises the far.exe file as a Trojan

Post by karlisk4 »

I've been using this program since Windows xp and never had problems with it...
Post Reply

Return to “Support and Troubleshooting”