SPScanCT.exe detected as virus by Avast/AVG
-
Just wanted to let Alt-N know- the SPScanCT.exe file in the current version of Mdaemon is being detected as a virus by Avast/AVG. You can verify this by uploading the file to VirusTotal. They are detecing it as a Win64:Evo-gen[Trj] trojan.
This is preventing Mdaemon from installing on systems that have Avast installed (in our case it is Avast Business/Avast CloudCare).
I have submitted this as a false positive to Avast but figured it would help if Alt-N themselves contacted Avast about the false positive.
Thank you,
Parrish Reinoehl
Pathfinder Networks, LLC
-
Arron Staff
Thank you, we will reach out to Avast.
-
Also, they are now listing the Mdaemon 24.5.0 installation file as a trojan as well. I'm guessing because it contains that SPScanST.exe file- but not sure. Here is the screen grab of the infection we see when trying to install Mdaemon.
-
A security platform called Trellix is now detecting it (it wasn't four hours ago), link to my virustotal upload below
-
Arron Staff
We have checked the file on our systems and it is reported as clean. I've attempted to reach out to Trellix but they only accept misclassification reports from customers. If you are a customer of Trellix please report the misclassification to them.
Thanks,
Arron
-
@Arron I'm afraid not, we're a Sophos house here.
-
Arron Staff
These misclassifications should all be corrected now.
-
No it is not fixed it popped up this morning on my email server
-
Arron Staff
I reported the misclassification to Avast and AVG, they confirmed it was a misclassification and reported that they addressed the issue. I verified the issue is corrected using Virustotal.
If you are still having issues with the file being incorrectly classified, please contactd AVAST.
-
I am working with them as we speak on this and one other file from another software