DisplayFusion

WARNING: You currently have Javascript disabled!
This website will not function correctly without Javascript enabled.

[Issue - 8.0 Beta 7] Installation triggers an Avira antivirus warning

Terabyte

128 discussion posts

While I was installing the new beta version (over the old beta 6) I got a warning from Avira about this file:

Code
Copy
Select All

ADWARE/SpeedBit.Gen7

After I closed the installer Avira reported the same issue also for the same file installed in the program own folder:

Code
Copy
Select All

C:\Program Files (x86)\DisplayFusion\Hooks\AppHookWIN5064_e7e9fe88-960f-4b8d-ba70-e2284616e828.dll

Jun 6, 2016 • #1

We've reported this issue to Avira, hopefully they'll release a new signature soon to correct this.

Jun 6, 2016 • #2

Terabyte

128 discussion posts

Great, let me know if you hear anything back. For now I went back to Beta 6 temporarily

Jun 6, 2016 • #3

siliconman01

426 discussion posts

All 4 of the DLLs shown below are being detected by Avira as Speedbit.Gen7 adware. I reported all of them to Avira this morning. (7-June-2016)

AppHookWIN5032_0564b5c1-0da8-42ee-801d-27f803ef0550.dll
AppHookWIN5064_95c27220-f8cd-44db-a5f4-167d4a04216c.dll
AppHookWIN6032_69080562-b2af-40d2-bf91-2c8192481a78.dll
AppHookWIN6064_3a85ab1b-eb9d-4985-bd66-37f7789578a7.dll

ASUS home built Pc on Windows 10 x64 Pro with 3 Dell U2719D monitors. Dell XPS 8940SE on Windows 11x64 Pro with 2 Dell U2719D monitors.

Jun 7, 2016 • #4

Avira is aware of the issue, hopefully they'll fix it soon.

https://analysis.avira.com/en/status?uniqueid=J9Qf7ZEstZYrM9NOVKC3NhY5wGGJcVV6&incidentid=2046844

Jun 7, 2016 • #5

Terabyte

128 discussion posts

Based on that link it seems they fixed the false positive already:

Code
Copy
Select All

The file 'AppHookWIN5064.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 8.12.98.22.

I just checked Avira info and it has already updated to that version earlier. I'm going to re-install Beta 7 in a few minutes, I'll let you know how it goes

Jun 7, 2016 • #6

Terabyte

128 discussion posts

Unfortunately it seems it is not fixed yet. Avira updated to virus definition version 8.12.98.22 earlier but it still detects it, even more it just updated again to definition 8.12.98.34 and it is still the same.

Jun 7, 2016 • #7

I'm not sure how fast they'll fix it, but I'm really hoping they'll release an update today.

Jun 8, 2016 • #8

Terabyte

128 discussion posts

Quote:

I'm not sure how fast they'll fix it, but I'm really hoping they'll release an update today.

I made another submission myself and this time, instead of mentioning a specific VDF version, they updated it to say:

Code
Copy
Select All

Detection will be removed from our virus definition file (VDF) with one of the next updates.

I'll keep an eye on future updates myself and report back, they are up to 8.12.98.110 for now and there's no change.

Jun 8, 2016 • #9

Excellent, I hope they fix it quickly.

Jun 8, 2016 • #10

Terabyte

128 discussion posts

Seems Avira fixed the false positive for the Beta 7 file finally in VDF 8.12.98.120.

But now updating to Beta 8 the new file gets flagged again. I can't send another report right now but I'll try and send it again later, hopefully I remember to send it

Jun 20, 2016 • #11

Terabyte

128 discussion posts

Okay, reported it again here: https://analysis.avira.com/en/status?uniqueid=pVtjdf73M6XcLRzyOc8FYQvSSSV3M87N&incidentid=2050818

I hope Avira can finally figure it out once for all.

Jun 20, 2016 • #12

Terabyte

128 discussion posts

I can confirm that 8.0 Beta 8 malware detection is fixed in VDF 8.12.100.56 :laugh: