Reply to thread

Message

<blockquote data-quote="Slerion" data-source="post: 1086967" data-attributes="member: 50259">Hardened mode being one , i think web protection email protection , and a few more things like ransomware protection , cybercapture and more ( talking about the Avast &quot;FREE&quot; version not the &quot;one&quot; Version[URL unfurl=&quot;true&quot;]https://www.microsoft.com/en-us/wdsi/filesubmission[/URL]You can upload your samples at the provided link and test for yourself; the best real-world example is you. Technically, this tool is rated &quot;Malicious&quot; because, after direct user input (meaning the user chooses to use certain features), it could deactivate certain features. There is no malicious behavior, no virus, rootkit, ransomware, nothing, not even adware. At most, you could categorize this as &quot;potentially unwanted program&quot; in Microsoft&#039;s interest (for removing data gathering features, etc.), but that&#039;s about it. It&#039;s not just a &quot;General&quot; or &quot;Heuristic&quot; false positive; it&#039;s incorrectly labeled as a Trojan, which is completely inaccurate. They also took about two weeks to provide this answer. Similar sample uploads also take a while. But don&#039;t take my word for it; try it yourself.[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/windows-defender-and-their-biased-detections.130302/#post-1082918[/URL]Microsoft not only misclassified a piece of software, but they also reinforced a false positive by attributing &quot;features&quot; (such as being a Trojan) to it. This was done slowly, and one could even argue, rather dramatically, that now any software that enables a user to perform certain &quot;actions&quot; could be labeled a Trojan according to Microsoft&#039;s rating system. This could apply to any program, whether it&#039;s CCleaner, most programming tools, or others, as they could all potentially perform similar functions with ease.their Description of a Trojan<ul>
<li data-xf-list-type="ul">Trojan: A type of malware that attempts to appear harmless. Unlike a virus or a worm, a trojan doesn&#039;t spread by itself. Instead, it tries to look legitimate to tricks users into downloading and installing it. Once installed, trojans perform various malicious activities such as stealing personal information, downloading other malware, or giving attackers access to your device.&quot;</li>
</ul>Source <a href="https://learn.microsoft.com/en-us/defender-xdr/criteria" target="_blank">How Microsoft identifies malware and potentially unwanted applications - Microsoft Defender XDR</a>I&#039;m not suggesting that Microsoft Defender is inadequate; it&#039;s actually a pretty good antivirus. However, I&#039;m dissatisfied with the time they take to process samples and their incorrect categorization of certain software/samples.<a href="https://www.avast.com/report-false-negative#pc" target="_blank">Report False Negative</a>In this instance, Avast is significantly ahead of the curve. Typically, when you submit a sample through their website at the provided link, you receive a response via email (not allways) either the same day or within one day, informing you whether the false positive or unidentified malicious file has been whitelisted or detected.</blockquote>

[QUOTE="Slerion, post: 1086967, member: 50259"] Hardened mode being one , i think web protection email protection , and a few more things like ransomware protection , cybercapture and more ( talking about the Avast "FREE" version not the "one" Version [URL unfurl="true"]https://www.microsoft.com/en-us/wdsi/filesubmission[/URL] You can upload your samples at the provided link and test for yourself; the best real-world example is you. Technically, this tool is rated "Malicious" because, after direct user input (meaning the user chooses to use certain features), it could deactivate certain features. There is no malicious behavior, no virus, rootkit, ransomware, nothing, not even adware. At most, you could categorize this as "potentially unwanted program" in Microsoft's interest (for removing data gathering features, etc.), but that's about it. It's not just a "General" or "Heuristic" false positive; it's incorrectly labeled as a Trojan, which is completely inaccurate. They also took about two weeks to provide this answer. Similar sample uploads also take a while. But don't take my word for it; try it yourself. [URL unfurl="true"]https://malwaretips.com/threads/windows-defender-and-their-biased-detections.130302/#post-1082918[/URL] Microsoft not only misclassified a piece of software, but they also reinforced a false positive by attributing "features" (such as being a Trojan) to it. This was done slowly, and one could even argue, rather dramatically, that now any software that enables a user to perform certain "actions" could be labeled a Trojan according to Microsoft's rating system. This could apply to any program, whether it's CCleaner, most programming tools, or others, as they could all potentially perform similar functions with ease. their Description of a Trojan [LIST] [*][B]Trojan:[/B] A type of malware that attempts to appear harmless. Unlike a virus or a worm, a trojan doesn't spread by itself. Instead, it tries to look legitimate to tricks users into downloading and installing it. Once installed, trojans perform various malicious activities such as stealing personal information, downloading other malware, or giving attackers access to your device." [/LIST] Source [URL='https://learn.microsoft.com/en-us/defender-xdr/criteria']How Microsoft identifies malware and potentially unwanted applications - Microsoft Defender XDR[/URL] I'm not suggesting that Microsoft Defender is inadequate; it's actually a pretty good antivirus. However, I'm dissatisfied with the time they take to process samples and their incorrect categorization of certain software/samples. [URL='https://www.avast.com/report-false-negative#pc']Report False Negative[/URL] In this instance, Avast is significantly ahead of the curve. Typically, when you submit a sample through their website at the provided link, you receive a response via email (not allways) either the same day or within one day, informing you whether the false positive or unidentified malicious file has been whitelisted or detected. [/QUOTE]

Verification