AntDM 2.9.2 flase positive

by **jvidal** Wed 1 Feb - 20:23

Hi!
The idiots @ avast do it again, now avast is flagging Antdm 2.9.2 installer as malware. I tried to report the false positive, but the damn page timed out.
Maybe you should contact them, so they can fix it.

by **antdm** Thu 2 Feb - 3:58

There is a group of antiviruses with whom it is difficult to talk. Avast is among them.
We check our builds here https://www.virustotal.com/. If it is pure, then there are no arguments to call.
Antiviruses ask you to provide additional information about false positives (version, triggering conditions, etc.)...
There is no way to install antiviruses and only test them.

by **jvidal** Thu 2 Feb - 6:25

the databases at virustotal are not always up to date.
For example (this happened to me), a program was not flagged by avast @virustotal, but it was flagged by Avast on my machine. I wouldn't trust virustotal 100%
I'll try to report it again...

edit: false positive report succeeded this time. let's hope the "geniuses" @ avast fix it.
edit 2: they replied promptly, asuring me that the detection was removed

by **antdm** Thu 2 Feb - 9:23

jvidal wrote:
edit 2: they replyed promptly, asuring me that the detection was removed

Thank you! AntDM 2.9.2 flase positive 1f60e

by **Mr.X** Tue 7 Mar - 22:13

Now the turn is for Kaspersky from VirusTotal, it says:
UDS:Trojan.Win32.Agent.xauooj

Version AntDM-x64.2.10.0-setup.exe

@antdm
Could you open a new thread to report false positives for any future releases please?

by **antdm** Wed 8 Mar - 6:22

Request to Kaspersky support was submitted.

by **antdm** Wed 8 Mar - 6:41

Kaspersky support answer wrote:
Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.
You can also consider participating in our Allowlisting program:
https://www.kaspersky.com/partners/allowlist-program

Best regards, Maxim, Malware analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

by **Mr.X** Wed 12 Apr - 17:07

Again the turn is for Kaspersky from VirusTotal, it says:
UDS:Trojan.Win32.Agent.xawjuf
AntDM-x64.2.10.1-setup

by **antdm** Wed 12 Apr - 17:19

The false positive request was sent to Kaspersky team.

by **Mr.X** Wed 12 Apr - 17:31

You can also consider participating in our Allowlisting program:
https://www.kaspersky.com/partners/allowlist-program

I assume this program is quite a bit costly, right?

by **antdm** Wed 12 Apr - 17:36

Mr.X wrote:

You can also consider participating in our Allowlisting program:
https://www.kaspersky.com/partners/allowlist-program
I assume this program is quite a bit costly, right?

This class of software cannot participate in this Allowlisting program. AntDM wanted to join some years ago, but Kaspersky support apologized and refused.

by **Mr.X** Wed 12 Apr - 17:44

antdm wrote:This class of software cannot participate in this Allowlisting program. AntDM wanted to join some years ago, but Kaspersky support apologized and refused.

Also I assume this refusal is, in part, due to the lack of a Digital Signature.
I wonder why you AntGROUP haven't already introduced signed executables. I mean you have many years now in the market of downloaders.

by **antdm** Wed 12 Apr - 17:49

No signature is required to participate in the Allowlisting program.
Program class "File downloaders" cannot participate in this program because these softwares may potentially violate the rights of content owners.

by **Mr.X** Wed 12 Apr - 17:52

Fine but I as security aware user, am expecting that someday you will release signed executables and dlls. I really hope so.

by **antdm** Wed 12 Apr - 17:59

There are different digital signatures. No signature is guaranteed to avoid false positives.
The signature that I can use it does not give any advantage to AntDM at all.
The signature above the class has unacceptable conditions for me.

by Sponsored content

AntDM 2.9.2 flase positive

AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive

Re: AntDM 2.9.2 flase positive