You are here

AVG False Positives Again (Feb 9, 2008)

10 posts / 0 new
Last post
John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 13 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
AVG False Positives Again (Feb 9, 2008)

It looks like AVG is again having issues with detecting false positives in all the apps (or nearly all of them). As usual, we know it's a false positive because other antivirus products (like ClamWin Portable and the online scanners) all register them clean. And, AVG is detecting false positives in months-old releases which it didn't before.

If you're a user of AVG, you should contact their support to fix the issue. Until then, your only real options are:
1. Tell AVG to ignore the errors when it comes up
2. Disable AVG
3. Switch to a different antivirus program that does not have this issue
4. Refrain from using portable apps and refrain from installing software that uses NSIS-based installers (OpenOffice.org, Firefox, WinAmp, Google Apps, etc) until AVG fixes their issue.

@Meta-Moderators: Please lock all topics posted about this issue and edit the main post to point to this topic. There's no need to clutter the forums with people re-reporting the issue.

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 10 months ago
Joined: 2006-06-18 13:55
Wish I could

Wish I could lock a topic or edit it Sad

Tim

Things have got to get better, they can't get worse, or can they?

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 13 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
I know

And as I've said, with Drupal, it's all or nothing. The ability to edit a topic in the forums gives a user the ability to edit every single page sitewide, including the homepage. There's nothing at all I can do about it at the moment. Unless someone has a constructive suggestion on it, please stop bringing it up. Sad

As an aside... I am working on a solution. It may be in place as soon as tomorrow if all goes according to plan. Smile

Sometimes, the impossible can become possible, if you're awesome!

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 10 months ago
Joined: 2006-06-18 13:55
Misunderstood

Sorry John,

You misunderstood me. I was not asking for those permissions.
You "seemed" to be asking the moderators to do something that we can't.

I meant it in the just frustrated sense of it would have been easier earlier if I could have locked or moved them.

More like "John, I'm sorry, I couldn't" NOT "John I want to be able to"

Tim

Things have got to get better, they can't get worse, or can they?

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 13 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Meta-Moderators

Sorry for that... I mean meta-moderators (aka Marko and Ryan).

Sometimes, the impossible can become possible, if you're awesome!

Gizmokid2005
Gizmokid2005's picture
Offline
Last seen: 3 months 1 day ago
Developer
Joined: 2007-01-17 19:24
Instead of bringin up a new topic

AVG is detecting a false positive again...this time in Pidgin's GTK.

FULL FILE:

'\PidginPortable\App\GTK\lib\gtk-2.0\2.10.0\engines\libthinice.dll'

Just an FYI for everyone.

Nightwatch
Offline
Last seen: 16 years 10 months ago
Joined: 2008-03-19 23:54
Kaspersky Virus Alert

Hello all,

First of all thanks for preparing and making available such a useful software, like of which I had been longing for to use on my USB as a portable solution for (mostly) on-the-go internet search abilities.

However, I would like to let you know that during the download and the sussequent virus scan, Kaspersky Internet Security Suit prompted an (as I believe false) alert which follows as such:

>

KASPERSKY Website then continues with this definition of the file:

"" Trojan-Spy.HTML.Fraud.gen
Aliases
Trojan-Spy.HTML.Fraud.gen (Kaspersky Lab) is also known as: Phish-BankFraud.eml (McAfee), Trojan Horse (Symantec), TrojanSpy:HTML/UrlSpoof.E* (RAV), HTML_SWENFRAUD.A (Trend Micro), TR/URLSpoof.P (H+BEDV), HTML/URLspoof.B@expl (FRISK), VBS.Trojan.Inor.Z.Spoofer (SOFTWIN), HTML.Phishing.Bank-31 (ClamAV), Exploit/URLSpoof (Panda) Detection added Nov 23 2004
Description added Dec 29 2004
Behavior TrojanSpy
Technical details

This family of Trojans utilises spoofing technology. The Trojans themselves are contained in fake HTML pages. Messages, purportedly from banks, financial institutions, internet stores, software companies etc. are sent to users. These messages contain a link to the fake page; this link exploits the Frame Spoof vulnerability in Internet Explorer.

The Frame Spoof vulnerability is present in Internet Explorer v. 5.x and 6.x, and detailed in Microsoft Security Bulletin MS04-004. The bulletin also gives recommendations on how to recognise spoofed sites.

Once a user visits the fake site, and enters account details or personal information, these details will be sent to a malicious remote user, who will then have access to users' confidential information.""

I believe that this may need to be noted on the site that during download, such a message may be received, and on this issue a comment placed on this site.

Thanks.

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 13 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
False Positive

This is a false positive by Kaspersky in their current definitions update. Their previous update did not have this issue and if it were an actual infection, they would have alerted on it previously as this trojan has been out since 2004 and the PortableApps.com Suite help file you refer to was last updated in 2006. Kaspersky should be informed of their issue via their standard support channels.

Sometimes, the impossible can become possible, if you're awesome!

Nightwatch
Offline
Last seen: 16 years 10 months ago
Joined: 2008-03-19 23:54
Kaspersky false alert -Thanks for clarification

Thanks for the clarification that you kindly offered, which would definitely help many Kaspersky users who may also wish to download and enjoy the portable apps suits. I will try to let Kaspersky know of the issue as you advise. And further to this matter, I have installed the software and seen no adverse effects; working very nicely. Thanks.

Nightwatch
Offline
Last seen: 16 years 10 months ago
Joined: 2008-03-19 23:54
Kaspersky confirms the false alert

Further to my post on the issue of "Trojan Alert" given by Kaspersky Security Suite 7.0 version 7.0.1.321b ( as of "Trojan-Spy.HTML.Fraud.gen" )in respect of "portableapps_suite_standard_1.0.exe" , now I have received a confirmation of "false alert" from Kaspersky upon my enquiry which reads as:

quote unquote.

So, it seems that is the end of this matter and I'd be happy if this post helps others in any possible way who may receive same type of warnings from their Kaspersky suites.

Thanks.

Log in or register to post comments