I have 2 machines, 1 with XP Home SP3 which has Avira Personal (free) anti-virus, a-squared's Mamutu and Comodo Firewall Pro (also free). Every time I try downloading and installing CleanMem, Avira claims that there is a trojan. My other (main) machine dual boots XP Pro SP3 and Vista Ultimate both of which run ESET NOD32, a-squared Anti-Malware and Comodo Firewall Pro. NOD32 finds nothing wrong with CleanMem nor does a-squared. I tend to trust NOD32 much more than Avira but Avira is very highly rated at the moment.
The intent of this post is so that the programmer(s) from PcWinTech is made aware of this. Avira is free and is becoming very popular (look at the number of downloads on CNet). I would hate to see a great little program like CleanMem suffer because of false positives. You might want to contact Avira. I don't think there is a way for me to submit a sample of your installer to them using the free version of this a-v. I'm pretty sure that is only an option in the premium version, but I will check.
Keep up the great work!
- Login or register to post comments
-
Printer-friendly version- Send to friend
Virus
Avira has already been contacted about cleanmem and they said they verified it as clean and would update there program
in fact here is a email response from them that they sent to one of the users of cleanmem on 9-22-2008
seems like its the same generic virus it falsely detected last time TR/Crypt.ULPM.Gen
Hello,
As promised, I have sent the CleanMem installer to Antivir\Avira, so they could check it. The false positive will be dealt with soon.I have just received this reply:
A listing of files alongside their results can be found below:
File ID Filename Size (Byte) Result
25139184 cleanmem_v1.2.1_setup.exe 1.7 MB FALSE POSITIVE
Please find a detailed report concerning each individual sample below:
Filename Result
cleanmem_v1.2.1_setup.exe FALSE POSITIVE
The file 'cleanmem_v1.2.1_setup.exe' has been determined to be 'FALSE POSITIVE'.In particular this means that this file is not malicious but a false alarm.Detection will be removed from our virus definition file (VDF) with one of the next updates.
Of course I just put 1.3.0 out today but hopefully they didn't just skip the file name and not actually cleaned the fals positive.
Looks like I will have to contact them about this one to, Geez lol
I just checked there site, here is a link on how to upload the file to them if you would like to do it your self, I will also send it.
http://www.avira.com/en/support/faq/details.html?id=122
And avast is my antivirus of choice, free for home users to :-)
Wow! Quick response! The
Wow! Quick response! The version I was referring to was v1.3, I guess they didn't update their database. Makes me begin to wonder just how good they really are. I mean, any a-v can place highly if it detects almost everything including false positives. It is the really good one's that detect the real problems. Maybe the site that I used as a reference of good a-v's (av-comparatives.org) should try to alter their criteria. I think I read that they are doing just that.
Thanks for the quick response Shane. Love and respect your work.
Thanks
Thanks, I try my best. I check the site about a dozen times a day if not more when im not working (My wife hates it) lol, Im always adding new pages for the router section and I check a lot to answer any questions people might post. The site is only a few months old so im trying my best to make it a good site.
But anything else you need, no matter what it might be don't be a afraid to ask.
Take care
Shane
Avira Fixed
Good news they will have a update out soon to fix the false positive
A listing of files alongside their results can be found below:
File ID Filename Size (Byte) Result
25150739 cleanmem_v1.3.0_setup.exe 1.7 MB FALSE POSITIVE
Please find a detailed report concerning each individual sample below:
Filename Result
cleanmem_v1.3.0_setup.exe FALSE POSITIVE
The file 'cleanmem_v1.3.0_setup.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.