Author Topic: AVAST TREATS COUPON PRINTER DOWNLOADS AS TROJAN HORSE  (Read 1401 times)

Offline thebreeze

  • Newbie
  • *
  • Posts: 1
    • Personal Message (Offline)
AVAST TREATS COUPON PRINTER DOWNLOADS AS TROJAN HORSE
« on: March 11, 2011, 02:15:12 PM »
I know that at least one vendor has contacted Avast about this but is there a workaround?
I am trying to use a couple of different coupon printer downloads and Avast prevents me
from actually printing the coupons. It flags it continuously as a trojan horse.

Online DavidR

  • avast! √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 69236
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Online)
Re: AVAST TREATS COUPON PRINTER DOWNLOADS AS TROJAN HORSE
« Reply #1 on: March 11, 2011, 02:54:13 PM »
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\*
That will stop the File System Shield scanning any file you put in that folder.

If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.

- In the meantime (if you accept the risk), add the full path to the file to the exclusions lists (see Note below):
File System Shield, Expert Settings, Exclusions, Add and
avast Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the \* to \file_name.exe where file_name.exe is the file you want to exclude.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security

Online craigb

  • avast! √úberevangelist
  • Serious Graphoman
  • *****
  • Posts: 8081
  • Gender: Male
    • Personal Message (Online)
Re: AVAST TREATS COUPON PRINTER DOWNLOADS AS TROJAN HORSE
« Reply #2 on: March 11, 2011, 02:55:12 PM »
Iv got no idea about coupon's but i thought i would let you know that you need to go into your profile and hide your email so the spammers dont get you  ;)
Windows 8.1 Pro X64/ IE 11/ Avast 9.0.2018/ MBAM Premium 2.0.2

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now