You are here

Malware infection: "Positive alert"

6 posts / 0 new
Last post
mkrepair
Offline
Last seen: 6 years 11 months ago
Joined: 2017-12-17 07:31
Malware infection: "Positive alert"

If anyone creates topic named "infection" or something else, you posted comment with "false positive" alert. Don't you have file infection on your servers? Scan your website with virustotal.com.

John T. Haller
John T. Haller's picture
Online
Last seen: 18 min 36 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Huh?

Not sure what you're referring to. All apps and pages are clean as always. Many antivirus products will have false positives on individual apps. Using something like VirusTotal.com to compare to others is what we always recommend. Every single post about someone's antivirus detecting an app as suspicious has been a false positive and proven with the comparisons on VirusTotal.

Sometimes, the impossible can become possible, if you're awesome!

mkrepair
Offline
Last seen: 6 years 11 months ago
Joined: 2017-12-17 07:31
FileRepMetagen is not a malware?

Scan with VirusTotal your portable Smart Defrag and normal Smart Defrag. This is not similar, huh? Avast Antivirus detected your portable Smart Defrag as FileRepMetagen [Malware]. I have Avast Antivirus on all of my PCs. I know that's a heuristic analysis, but a detection. Thanks for any replies. PS: I'm speaking Czech, please report my errors in writing.

John T. Haller
John T. Haller's picture
Online
Last seen: 18 min 36 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Adware Not Present

FileRepMetagen is an adware alert from Avast. The adware component is not included with Smart Defrag Portable. However, Avast still alerts on the rest of the app as do similar antiviruses like AVG and DrWeb. Note that the majority of antivirus scanners as well as all the tier 1 scanners (Symantec, McAfee, etc) rate it as 100% clean.

Sometimes, the impossible can become possible, if you're awesome!

mkrepair
Offline
Last seen: 6 years 11 months ago
Joined: 2017-12-17 07:31
VirusTotal report

Here's a VirusTotal portableapps.com domain information: https://www.virustotal.com/#/domain/portableapps.com. Look at first Communicating file (DAPUpd.exe). 38 antiviruses detected this file!

John T. Haller
John T. Haller's picture
Online
Last seen: 18 min 36 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
What Communicating Means

Communicating means that the infected file you referenced (DAPUpd.exe) likely tried to download something from us. Viruses and malware communicate with all sorts of domains. The malware is likely downloading a portable app to try to use it to do something else on the PC. There's not much we can do about that. For comparison, look at all the malware that communicates with Google.com: https://www.virustotal.com/#/domain/google.com

Sometimes, the impossible can become possible, if you're awesome!

Log in or register to post comments