Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on August 18, 2014, 01:13:50 AM

Title: Mad as hell
Post by: REDACTED on August 18, 2014, 01:13:50 AM
after years of using both, Avast suddenly decides it doesn't like WordPerfect 8 .exe and removes key files which effectively removes it from my computer. A popup notified me, but there was no way to circumvent it. I "restored" my comp. to an earlier date and it did the same thing again.  This is total bullshit, I should be able to reverse this but the latest version of Avast has no way of doing this and the so called help/support system is so convoluted I'm still trying to figure out how to send a "support ticket" - jump through this hoop, download this, jump through this other hoop ( which looks like the previous hoop etc etc . . . what an f'ed up bunch of bs. >:( >:( >:(
Title: Re: Mad as hell
Post by: Eddy on August 18, 2014, 01:27:01 AM
Calm down, calling things bs and such is not gonna solve your problem/help you.

If I understand your post correctly, avast is falsely detecting WP (8) as malware.
If this is so, please report it through the contact form:
www.avast.com/contact-form.php

avast sure let you put back files.
But it depends on the settings you have chosen.
If you have set avast to move files to the chest, you can restore them from there.
If you have set to delete, you will need to (re)install the application to get them back.

If you want to submit a ticket:
https://support.avast.com/Tickets/Submit/RenderForm
Title: Re: Mad as hell
Post by: aviwil2 on August 18, 2014, 11:37:18 AM
Hi Eddy,
           Have exact same problem . From the Chest , I have restored and added the relevant file ( WPWIN8.EXE ) to the list of exclusions in Settings-Antivrus , but the exclusion does not work ( even after a  reboot ) . Paddyo - the only way I have found to run Wordperfect , until this gets rectified is to , restore the file from the chest and then disable Avast Shields . You may want to disconnect from the internet while you do this . After finishing Wordperfect , you need to re-enable the shields . Avast will then again take the file WPWIN8.EXE into the chest , and you will need to restore it again , next time you want to run Wordperfect
Title: Re: Mad as hell
Post by: aviwil2 on August 18, 2014, 11:40:20 AM
Eddy - I did also report this to Avast , when prompted .
Title: Re: Mad as hell
Post by: Eddy on August 18, 2014, 03:40:30 PM
Thank you for reporting it, now it is up to avast to solve it.

There are two places you can set exclusions.

1)
In the settings of each shield

2)
Under options > anti-virus
This is the global exclusion list as it is called

I suggest to exclude the entire WP folder for now, till avast has solved it.
It can be it is already solved with the latest vps update.
You may want to check if it is.
Title: Re: Mad as hell
Post by: REDACTED on August 18, 2014, 04:10:59 PM
Thanks for the responses. Surely you can understand the total & complete frustration. A programme that is supposed to help arbitrarily causing major damage. :'(

I can find no place to reverse actions, I cannot find access to the "chest". I'm sure previous versions had these features, but maybe i'm thinking of another product.  Is this a feature removed from the FREE version? I cannot find access to set shields either.

 
Title: Re: Mad as hell
Post by: REDACTED on August 18, 2014, 04:33:03 PM
Please see images below.

You can choose to restore and exclude. Also send the files to avast! to be excluded from detection in the future if found to be a F/P.

Title: Re: Mad as hell
Post by: Pondus on August 18, 2014, 05:03:38 PM
avast! 2014: Using the Virus Chest   http://www.avast.com/en-eu/faq.php?article=AVKB21#artTitle

FAQ section  http://www.avast.com/en-eu/faq.php
FAQ videos   http://www.avast.com/en-eu/faq.php?q=video#searchForm




Title: Re: Mad as hell
Post by: Pondus on August 18, 2014, 05:04:53 PM
you can report a possible false positive case to avast lab using one of these options

You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject:  False Positive / undetected sample (select subject according to your case)
zip password:  infected

or you can send files from avast chest
how to use the chest.    http://www.avast.com/faq.php?article=AVKB21

Title: Re: Mad as hell
Post by: REDACTED on August 18, 2014, 05:42:50 PM
Again Thanks for the info . . . WP8 files in the chest have been scanned, no virus
                                            -  restore, add to exclusions & report false positive has been done
                                            - warning instead of fix automatically had been selected
                                            - same thing repeats - warning, back into the chest
                                                                              - scanned, restored, add to exclusions
                                                                              - same thing again
  -  WTF!
Title: Re: Mad as hell
Post by: aviwil2 on August 18, 2014, 05:53:32 PM
May I suggest to Avast that the easiest thing would be for them to fix this - shouldn't be too big a deal .
BTW , I suspect there are a lot (I mean - a  LOT ) of WP users out there just as fired up as paddyo , but who have no idea that this is coming from Avast .
Title: Re: Mad as hell
Post by: Pondus on August 18, 2014, 05:54:13 PM
what malware name does avast give the file?
Title: Re: Mad as hell
Post by: REDACTED on August 18, 2014, 05:59:41 PM
Win32:Evo-gen [susp]
Title: Re: Mad as hell
Post by: REDACTED on August 19, 2014, 01:13:41 AM
so while I was away for several hours dealing with other stuff, someone snuck in and fixed this bug.
I don't usually leave my comp on but I did so I didn't catch any popup notification.

Thanks to all who chimed in  ;)

Just out of curiosity, can it be fixed remotely just by updating files?
Title: Re: Mad as hell
Post by: Pondus on August 19, 2014, 01:18:40 AM
Quote
Just out of curiosity, can it be fixed remotely just by updating files?
they fixit by releasing new signature files

What is a Virus Signature?   http://antivirus.about.com/od/whatisavirus/a/virussignature.htm
Title: Re: Mad as hell
Post by: aviwil2 on August 21, 2014, 07:55:45 AM
Thanks for that fix guys .
Can you please tell me why my IP address appears with all my posts ?
Not exactly AV oriented .
Title: Re: Mad as hell
Post by: REDACTED on August 21, 2014, 08:01:28 AM
Can you please tell me why my IP address appears with all my posts ?

Only you and the Global Mod. can see it...no one else. 
Title: Re: Mad as hell
Post by: aviwil2 on August 21, 2014, 09:38:06 AM
Thanks SafeSurf .
Never had this on any other forum , as far as I can recall .
Any reason for it ?
Title: Re: Mad as hell
Post by: Asyn on August 21, 2014, 09:40:37 AM
IP addresses are shown to administrators and moderators to facilitate moderation and to make it easier to track people up to no good. Members are also allowed to see their own IPs.
Title: Re: Mad as hell
Post by: aviwil2 on August 21, 2014, 09:53:45 AM
Thanks Asyn - fair enough .
I'd imagine those sophisticated "up to no goods" would be using fake IP's , tho .
Title: Re: Mad as hell
Post by: Asyn on August 21, 2014, 09:54:42 AM
You're welcome.