AVG reporting AIRVPN.exe infected with Luhe.Figa.A

[The_Purist 1]

Pretty sure it is a false positive but my AVG is reporting this on the 2.3.2 download for Windows.

[Staff 9894]

Hello!

 

Yes, it's a false positive, anyway you are not forced to use it, you can run OpenVPN or any OpenVPN wrapper/GUI to connect to our servers.

 

Kind regards

[OpenSourcerer 1409]

​Upload the executable to VirusTotal. Post your results, please.

[dwright 25]

Haha I got this as well. Panicked a little and did a bunch of scans but nothing bad happened. Must be some error in the AVG update.

[OpenSourcerer 1409]

​No, this has to do with the fact that the detection of malicious programs is based on signatures.

 

The problem is: A totally legit file can have the same signature as previously detected malware. Therefore the legit file allegedly contains malicious code. That also why you should NEVER trust your AV completely.

​

​But that's not the biggest problem: The biggest problem with signature-based detection is that you need a new signature every time the malicious code has been edited.

 

I bet if Air releases a new version of their OpenVPN software this deceptive behaviour won't persist anymore.