Menu

#2030 AV-Heuristics complain about a potential trojan.generic

Branch_+_Trunk
closed-fixed
nobody
Installer (56)
5
2013-02-03
2010-08-31
No

This is the message Kaspersky AV 2010 gives at the end of WINMERGE-2.13.13-SETUP.EXE (full progress bar). It's very likely that there is a false-positive (I guess it is one) upload at their website where a software developer can commit there software/installers. Maybe someone can do that and/or have a look why this message occurs?

Discussion

  • Kimmo Varis

    Kimmo Varis - 2010-09-05
    • status: open --> open-wont-fix
     
  • Kimmo Varis

    Kimmo Varis - 2010-09-05

    Once in a while we get these false positives from antivir software. And people get upset and start yelling to us that we are distributing viruses...

    It is just statistically natural that sometimes same byte sequences get generated that some of those millions of virus variants have also. There is nothing to fix from our side.

     
  • Simon Sobisch

    Simon Sobisch - 2010-09-05

    I didn't request to fix it but to upload new installation files as vendor to AV centers to tell them all is fine with our software.
    From my experience it's often faster if vendors upload files than users doing it.

    AV Forms:
    http://support.kaspersky.com/virlab/helpdesk.html (definitely a false positive warning here)
    https://submit.symantec.com/false_positive (not tested yet)

    If you don't want to do it - no prob, I do that as a normal user.

     
  • Kimmo Varis

    Kimmo Varis - 2010-09-06

    There is no "vendor" for WinMerge. We are anyway just group of independent developers.

    And indeed you are now part of the development group so you are equal as "vendor" than I am...

     
  • Simon Sobisch

    Simon Sobisch - 2010-09-06

    I guess this is the reason why Norton has changed there false positives form back (some months it was only available for "vendors").
    I've created an Kaspersky account for complaining about every new wrong file that is released and send a false positive for current experimental.
    Let's see what they answer.

     
  • Simon Sobisch

    Simon Sobisch - 2010-09-06

    Kaspersky updated there white-list and at least 2.13.13 don't raise a warning now.

    Do we want to leave this Bug open for other users complaining here about false positives? I'd contact the AV center in this case.

     
  • Simon Sobisch

    Simon Sobisch - 2010-09-06
    • status: open-wont-fix --> open-fixed
     
  • Christian List

    Christian List - 2013-02-03
    • status: open-fixed --> closed-fixed
    • milestone: --> Branch_+_Trunk
     

Log in to post a comment.