Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: UnbelievableDeveloper on June 22, 2013, 06:08:45 PM

Title: PUPs picked up in boot scan with heuristics at max
Post by: UnbelievableDeveloper on June 22, 2013, 06:08:45 PM
Hi, I use windows 7 Home SP1 (updated regularly) and Avast! Free 8.  I just ran a boot scan with heuristics at the maximum and the following three files were considered to be PUPs:

File :                          Location:

enterpricec.config.cch   c:\windows\microsoft .net\framework\v2.0.50727\CONFIG

security.config.cch        c:\users\owner\appdata\roaming\microsoft\clr security config\v2.0.50727.312

security.config.cch        c:\windows\microsoft.net\framework\v2.0.50727\config     

So, are these bad, or false positives because of the high heuristics setting?  Thanks in advance for all replies!
Title: Re: PUPs picked up in boot scan with heuristics at max
Post by: Asyn on June 22, 2013, 06:51:59 PM
Most probably FPs because of the high heuristics setting.
Title: Re: PUPs picked up in boot scan with heuristics at max
Post by: UnbelievableDeveloper on June 22, 2013, 11:10:15 PM
Quote from: Asyn on June 22, 2013, 06:51:59 PM
Most probably FPs because of the high heuristics setting.

That's what i figured, so I let them out of the virus chest and turned down the heuristics to normal for next time. 
.NET and CLR are things that microsoft compiled languages use, so they must be a FP, like you said.  I wish the
file shield would stop claiming that pngopt.exe is a suspected EVO-32 gen too.  For this, I turn off the file shield
whenever I want to optimize my .pngs.  And...thanx for the feedback!
Title: Re: PUPs picked up in boot scan with heuristics at max
Post by: Asyn on June 23, 2013, 07:59:28 AM
Quote from: UnbelievableDeveloper on June 22, 2013, 11:10:15 PM
1. I wish the file shield would stop claiming that pngopt.exe is a suspected EVO-32 gen too.  For this, I turn off the file shield whenever I want to optimize my .pngs. 
2. And...thanx for the feedback!

1. You can report a possible FP here: http://www.avast.com/contact-form.php
2. You're welcome.