Why does my anti-virus program (AntiVir) tell me there is a virus in your Windows software?
Up to Table of Contents
AntiVir (and some others like Avira, McAffee etc.) flag the GS-911 software as containing a virus or trojan. This is a false-positive! We use a high-end commercial copy-protection application, but some AV applications flag the GS-911 application due to this. We scan the application with SEVERAL AV scanners before releasing it..
We've been doing our best to contact the AV providers, and submitting our application for analysis - thus far the only one that we have received an official response from has been Avira:
Dear Sir or Madam,
Thank you for your email to Avira's virus lab.
Tracking number: INC00473516.
A listing of files alongside their results can be found below:
File ID Filename Size (Byte) Result
25629142 GS-911.exe 3.61 MB FALSE POSITIVE
Please find a detailed report concerning each individual sample below:
Filename Result
GS-911.exe FALSE POSITIVE
The file 'GS-911.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
We ask that you as customer take this up with your AV provider... this is the only way they can improve their signatures and algorithms... We would love to do this for you, but unfortunately we can't... if you read the dialog below... you'll understand...
> Thank you for contacting McAfee Consumer Support. How can I help you?
Customer: Hi - I would like to know where do I report an incorrect virus detection (false positive)
Divya: Hi Kobus, this is Divya from McAfee Technical Support and I would be assisting you today.
Divya: Kobus, to confirm, you need help to submit a sample to our research team. Is that correct?
Customer: correct
Divya: Not to worry, we will leverage all our resources to resolve this issue because your concern is our concern.
Divya: Kobus, for verification purpose, may I have your home telephone number with area code first?
Customer: +27<removed for publishing>
Divya: May I know if you are contacting from the same computer, which has an issue?
Customer: No, this is not the same computer
Divya: May I know the Operating System of the computer which has the issue?
Customer: Windows
Customer: 3/28/2010 5:30:07 AM Engine version =5400.1158
3/28/2010 5:30:07 AM AntiVirus DAT version =5931.0000
3/28/2010 5:30:07 AM Number of detection signatures in EXTRA.DAT =None
3/28/2010 5:30:07 AM Names of detection signatures in EXTRA.DAT =None
3/28/2010 5:30:01 AM Scan Started CNSCHAM3019355\SYSTEM (managed) VirusScan 8.5 On Demand Scan(Full) - Workstation
3/28/2010 6:41:56 AM Deleted SYSTEM c:\ProgramFiles\GS-911\GS-911.exe Artemis!722AFE1A00C3(Trojan)
Customer: FYI
Divya: May I know your e-mail address which is used to register with McAfee?
Customer: I am not a McAffee client - this is on one of our customer's PC's. We are an ISV.
Divya: May I have the e-mail address of your customer which is registered with McAfee account?
Customer: <removed to protect customer>@gmail.com (I am not sure whether this was used for mcaffee registration)
Divya: I am sorry, Kobus. I found no valid McAfee record for you. In order to assist you, we need a valid proof for your McAfee account. So could you please give me your alternate e-mail address?
Customer: Please read my response - I stated clearly that I am not a McAfee client. How is this relevant to submitting a sample?
Divya: I am really sorry, Kobus. In order to submit a sample, you need a valid McAfee account.
Customer: May I please speak to your supervisor.
...
There are many other free (for personal use) and commercial, excellent Anti-Virus programs.