Farbrausch demos are not viruses!

[bizzybody]

None of the demos written by the Farbrausch demo greoup are viruses. http://www.farb-rausch.com/ Yet periodically most antivirus programs, including Avast, will update and then announce they've "found" a virus in one or more of those programs.

I would appreciate it if you could somehow permanently stop Avast from doing this.

[DavidR]

The only way that can be done really is by confirming false positive (see below) and sending a sample.

What malware name is being given on the detection ?

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and possible false positive in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

[bizzybody]

The only way that can be done really is by confirming false positive (see below) and sending a sample.

What malware name is being given on the detection ?

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page.

Sure thing, not so easy when Avast won't allow it to be uploaded to Virustotal. Been down that road with several AV programs.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and possible false positive in the subject.

Oh absolutely, when Avast won't allow it to be added to an archive or be attached to an e-mail, and Yahoo Mail treats ALL password protected archives as viruses and blocks them from being attached, and Gmail can somehow penetrate multiple nested and password protected archives to find (and block) attachments of executable files, even when the file has been renamed with a non .exe extension.

 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

It would not be a gigantic job for the Avast people to download all of the Farbrausch demos. There's not a huge number. As a bonus they'd also get some entertainment from them. Most of them are quite small, amazing what can be done with a 64K program, but some of them are several megabytes.

[Maxx_original]

aren't these demos packed with krunchy? that's a strange packer that can trigger a false detection sometimes..

[DavidR]

The only way that can be done really is by confirming false positive (see below) and sending a sample.

What malware name is being given on the detection ?

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page.

Sure thing, not so easy when Avast won't allow it to be uploaded to Virustotal. Been down that road with several AV programs.
<snip>
It would not be a gigantic job for the Avast people to download all of the Farbrausch demos. There's not a huge number. As a bonus they'd also get some entertainment from them. Most of them are quite small, amazing what can be done with a 64K program, but some of them are several megabytes.

Since you didn't say what version of avast you are using 4.8 or 5.0 I didn't say how to get round this as there are two different processes for the different versions ?

I don't work for Alwil, but am and avast user like yourself, trying to help you resolve this as quickly as possible. I have no sway with Alwil software.