Advice Request A strange detection

[JB007]

Hello,
I have uninstalled (with AVG uninstall tool and Revo Pro) AVG ultimate on 1 of my PC abd installed Bitdefender.
I'm very surprised because BDTS detected 2 AVG files
Do you think they are false positives?

 

[SamBill]

Probably a false positive, did you restart the system after uninstalling AVG ?

 

[omidomi]

Hi
First of all I am glad to see you to Remove NSA tool from your System ,btw I am very sad because you change a spy tool with a bug tool
for this problem, I suggest you to upload that 'blah blah' file(s) to Virustotal Or you may submitted them to Well Respected Company for more analyze, who may know may be KING OF BUG Fp's or may be a spy file chicks remain from NSA tools
Well Respected company in level of detection are : ESET,Avira,Kaspersky....

 

[silversurfer]

Hello,
I have uninstalled (with AVG uninstall tool and Revo Pro) AVG ultimate on 1 of my PC abd installed Bitdefender.
I'm very surprised because BDTS detected 2 AVG files
Do you think they are false positives?
View attachment 258041View attachment 258040

Looks like FP, just leftover from before installed AV, it still happens for many AV vendors that files aren't fully removed especially inside C:\ProgramData

You may want to upload both files to VirusTotal

 

[Kongo]

Hello,
I have uninstalled (with AVG uninstall tool and Revo Pro) AVG ultimate on 1 of my PC abd installed Bitdefender.
I'm very surprised because BDTS detected 2 AVG files
Do you think they are false positives?
View attachment 258041View attachment 258040

I agree with the replies above. I'm pretty sure it's a false positive, but upload it to VirusTotal if you are not sure about it.

 

[ZeePriest]

I agree with the replies above. I'm pretty sure it's a false positive, but upload it to VirusTotal if you are not sure about it.

If he uploaded it to VirusTotal, will he be able to know if it was a malicious file or not? I'm still learning so please forgive me if I asked such questions

 

[omidomi]

If he uploaded it to VirusTotal, will he be able to know if it was a malicious file or not? I'm still learning so please forgive me if I asked such questions

if that file is zero day malware,no.if its a Fps,Yes.

 

[Gandalf_The_Grey]

I would use Antivirus Removal Tool to search for leftovers and remove them manually.
MT thread:

Antivirus Removal Tool - The technician friendly tool to detect and completely remove antivirus software. | MalwareTips

Hello everyone, I've released a new version of Antivirus Removal Tool, version 2020.06 (v.1). This program started to be a functionality of Windows Repair...

malwaretips.com

Homepage:

Antivirus Removal Tool

Antivirus Removal Tool (freeware) is a portable program to detect and completely remove antivirus software. It will help you to identify current and past installations, and it will provide you with the official specialized uninstallers. These are designed by the manufacturers of the antivirus...

antivirus-removal-tool.com

Screenshot:

 

[Kongo]

If he uploaded it to VirusTotal, will he be able to know if it was a malicious file or not? I'm still learning so please forgive me if I asked such questions

VirusTotal is a website on which you can upload any file that you think could be malicious and it will get scanned by pretty much every Antivirus engine out there (Kaspersky, ESET, Bitdefender and much more.) Even if all scan results are clean it's not a 100% guarantee because every AV could have theoretically missed the file, but it's an huge indicator that the file is clean when no AV detects it on VirusTotal.

 

[JB007]

Probably a false positive, did you restart the system after uninstalling AVG ?

Yes I reboot the system because AVG uninstall tool works in safe mode.

 

[SamBill]

Yes I reboot the system because AVG uninstall tool works in safe mode.

I guess they haven't updated their removal tool for other tools which is why AntiTrack files were left behind. Just wondering, what made you switch away from AVG to BD ? Any issues or just changed out of interest ?

 

[JB007]

I guess they haven't updated their removal tool for other tools which is why AntiTrack files were left behind. Just wondering, what made you switch away from AVG to BD ? Any issues or just changed out of interest ?

No, I simply like to try different AV on some of my PCs.

 

[show-Zi]

think you should be careful if Avast gives an NG judgment in Virus Total.

Personally, I presume that the file itself does not contain any problems or malicious intent. I think the subject of the warning applies not only to the presence or absence of malicious intent, but also to the power and ability to act within the system.

It's fun to try out various av related software, but they often leave too much debris and it's a hassle.

 

[ZeePriest]

VirusTotal is a website on which you can upload any file that you think could be malicious and it will get scanned by pretty much every Antivirus engine out there (Kaspersky, ESET, Bitdefender and much more.) Even if all scan results are clean it's not a 100% guarantee because every AV could have theoretically missed the file, but it's an huge indicator that the file is clean when no AV detects it on VirusTotal.

Awesome! Thanks a lot @SecureKongo! Now I've learned something new

 

[Stopspying]

Awesome! Thanks a lot @SecureKongo! Now I've learned something new

If you upload files or a URL to virustotal.com it gets analysed by +60 different anti-malware solutions from most of the better known vendors. An alternative scanning site is -

Jotti's malware scan

virusscan.jotti.org

in case VirusTotal is ever down, but it uses less solutions, 15 when I checked just now.

 

[plat]

You can use the portable Jotti scanner in case you don't want to open a browser. It sits in my Downloads in the rare times I need it.

Apps - Jotti's malware scan

virusscan.jotti.org

Spoiler

 

[Ink]

Do you think they are false positives?

Leftover files and registry entries are common even after use of dedicated uninstallation tools.

What would make you believe they are not false positives?

• it was flagged by Bitdefender
• they were not removed from uninstallation
• the file name
• the file type

 

[Kongo]

You can use the portable Jotti scanner in case you don't want to open a browser. It sits in my Downloads in the rare times I need it.

Apps - Jotti's malware scan

virusscan.jotti.org

Spoiler

View attachment 258078

 

[plat]

Yet Sophos is one of the engines jotti uses. What is up with that?

Sophos says "clean" on VirusTotal. But now SecureAge Apex says it's "malicious." Jotti has been sitting in my Downloads for a year, nothing has come of it. Dismissed.

 

[Stopspying]

View attachment 258081

I've just been doing similar to @plat1098 at virustotal

Scanning the .zip file gets zero detections


Scanning the .exe file gets the same detection as plat1098 had in their results