Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on January 26, 2015, 03:03:14 AM

Title: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: REDACTED on January 26, 2015, 03:03:14 AM
Ok I am FURIOUS right now! I have a utility for Open Rails train sim, to update the MSTS(MicroSoft Train Simulator) exhaust display definitions to OpenRails standards; however your GODDMAN 'virus scanner', keeps reporting the Diesel Power Updater/Diesel Smoke Updater(dpu.exe and DSU.exe respectively) files to me as a suspicious program.. And I have NO option to tell it to fuck off and just let it run the program. I have added the entire FOLDER for the DSU/DPU program to my exclude list under File Shield, but that has done NOTHING. Not even adding the programs themself to the exclusion list!!!! So you're telling me the exclusion list is a LIE? That the program just, IGNORES it and tells ME what is  best?!? I am THIS close to uninstalling your stupid program and going to someone else like Kapersky!
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: midnight on January 26, 2015, 03:08:27 AM
Deleted
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Staticguy on January 26, 2015, 03:17:34 AM
Every antivirus software is not 100% perfect. In some occasions, every antivirus program detects files and programs as false detection/positive as if it's a threat in fact it isn't. There's no reason for you to be very upset and put offensive comments.

You can report false positives about your programs to Avast via here https://www.avast.com/contact-form.php?subject=VIRUS-FILE or directly email them virus at avast dot com. Put subject heading as "False Positive" without quotes and put as much details as possible.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: REDACTED on January 26, 2015, 03:20:34 AM
Midnight: I'm flippin' pissed right now about this, because this is severely interfering with addon development, so no I'm not going to. You can instead provide -helpful- insight as to what to do to fix this broken POS and get it to work, and if a mod find sit offensive then they can edit it. As frankly I can hardly call that 'offensive', in the least. Sorry to say but if a couple swear words offend you, you shouldn't be on the internet plain and simple.

Static: There is QUITE a reason for me to be 'very upset', I'm in the middle of addon development right now to try and destress from a hellacious week, and look what I can't do because of this AV. Please do NOT act like you know EVERYTHING in my situation; however I have already reported the false positive via the default client. What I am looking for is a way to force the program to accept my exclusion list, which it is IGNORING. Or give me the option in the 'ask' menu when it detects the program, to let me run it anyway despite what 'momma thinks is best' sot o speak.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: CraigB on January 26, 2015, 05:30:17 AM
Please remember this is a public forum where minors attend and offensive language is not permitted.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Staticguy on January 26, 2015, 05:32:37 AM
Cloudrunnerking! I am trying to help you. Have you submitted a support ticket via Avast Support. You just have to wait around 5 days or about 1 week. Avast do read forum but you have to wait for their reply! If I were you I will submit a ticket to them that way I get reply fast.

Note: When you submit a ticket just wait for their reply. If you edit your 1st ticket or write a new comment about your 1st reply your support ticket will put back in the line. Support ticket is dealt with first come first serve basis.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: REDACTED on January 26, 2015, 06:27:01 AM
STatic: VEry well then, I'll see about that ticket...

Craig: To be honest, if they're that young where hearing a 'swear word' is a big 'no-no'? THey shouldn't be on the internet in the first place. I mean I forget what the age is, but there is an age where until you're over it, it's actually illegal to be on the internet. And further more, I cannot fathom what 'kid' would be on a tech-support forum basically...
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Pondus on January 26, 2015, 07:37:54 AM
Quote
I have added the entire FOLDER for the DSU/DPU program to my exclude list under File Shield, but that has done NOTHING
try a reboot after exluding, then try run the program ...... any change?



Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: CraigB on January 26, 2015, 08:12:58 AM
Craig: To be honest, if they're that young where hearing a 'swear word' is a big 'no-no'? THey shouldn't be on the internet in the first place. I mean I forget what the age is, but there is an age where until you're over it, it's actually illegal to be on the internet. And further more, I cannot fathom what 'kid' would be on a tech-support forum basically...
It's not a debate or for your reasoning why ::) just know that foul language is against forum rules and you have been warned.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: DavidR on January 26, 2015, 04:40:56 PM
<snip offensive content quote>

Would you please modify your post and delete the offensive language?

When requesting that the offensive language is removed - quoting the whole content including the offensive language, kind of defeats the purpose.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Eddy on January 26, 2015, 05:28:24 PM
cloudrunnerking,

you catch more flies with honey than with vinager ;)

Quote
there is an age where until you're over it, it's actually illegal to be on the internet.
No there isn't. Only the parents of a child can forbid it to go on the internet.
Quote
I cannot fathom what 'kid' would be on a tech-support forum basically...
I have seen 5 year old kids programming things that I can't

Since avast give a (possibly) false detection on the files, it can very well be others also do.
I suggest you run multiple scans on them:
https://www.virustotal.com/
http://virscan.org/
https://www.metascan-online.com/en
http://virusscan.jotti.org/

Even if the sites are using the same av's, I strongly suggest to test the files on all of them.
They sites may have different scan settings so it can be something is not detected on A but it is on B.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Cast on January 27, 2015, 04:07:15 AM
I wonder if this is similar to an issue I had with a certain driver where I would exclude it but it wouldnt exclude because everytime it was relaunched as a new process id?
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: REDACTED on May 15, 2016, 11:50:24 PM
Has this been resolved?  I'm in a similar boat and feel the same way. I've gotten so fed up with avast f###ing with the installs of my own software.  I know there isnt a virus, so I dont care if other virus scanning software were to detect it too.  I'm using avast (for now)... What is the point of having exclusion lists if they dont work.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Pondus on May 16, 2016, 12:54:06 AM
Quote
I know there isnt a virus, so I dont care if other virus scanning software were to detect it too
What detection name does avast give?


Quote
I've gotten so fed up with avast f###ing with the installs of my own software.
Support: Avast Clean Guidelines  >>  https://www.avast.com/faq.php?article=AVKB228#artTitle

How to report >> https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438


Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: DavidR on May 16, 2016, 01:33:51 AM
I know there isnt a virus, so I dont care if other virus scanning software were to detect it too.  I'm using avast (for now)...

What is the point of having exclusion lists if they dont work.

1. Which is why the detection given is important, it could be one with the {Susp} suffix, suspicious not necessarily malicious

If you are developing your own software, then it isn't going to be very well known or used by other avast users. This is often the case with new malware, so there is a fine line in what is new malware.

2. You don't mention where you made the exclusion (more than one possible option based on what detected it, 1 above) and exactly what you entered in the exclusion text.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: bruce_b on May 16, 2016, 02:48:36 AM
Your exclusion must be under the Active Protection, File System Shield, Scan When Executing
You may also want to turn off Scan For Potentially Unwanted Programs (PUPS) (on the Sensitivity Tab)
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: Eddy on May 16, 2016, 04:08:12 PM
People seem to forget that there are billions of applications.
It is not possible to check a newly added detection against all of them.


mgmngccnt,
unless you are the only one in the world that are using your application(s), you should care about if other av/security software is falsely or not detecting it.

The only way to avoid false positives is having no detection at all.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: DavidR on May 16, 2016, 05:27:12 PM
Your exclusion must be under the Active Protection, File System Shield, Scan When Executing
You may also want to turn off Scan For Potentially Unwanted Programs (PUPS) (on the Sensitivity Tab)

1. We need more information from the OP before we can say where an exclusion should be set. A point to note, if this is the DeepScreen scan then the exclusion should be in the AvastUI > General > Exclusions > DeepScreen.

This is why I sought more information.

2. Scan for PUPs if I remember correctly is off by default. We don't know if the OP changed that or even if the alert related to a PUP, I suspect not.

All the more reason for seeking more information.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: bruce_b on May 16, 2016, 06:17:54 PM
Hmmm .. Never thought about adding a program to the Deep Screen tab. I thought once it was on the File Exclusion list
you were all set.
Title: Re: False Positive - MAKE IT STOP!!!!!!!!!!!!!!!!!!!
Post by: DavidR on May 16, 2016, 07:30:45 PM
Hmmm .. Never thought about adding a program to the Deep Screen tab. I thought once it was on the File Exclusion list
you were all set.

It depends on it having been intercepted by the DeepScreen and even then it also depends on user settings having Enabled DeepScreen or kept it enabled. Another possibly fly in the ointment in Settings > General is the Enable Reputation services.

As you can see more choices than you can shake a stick at, so more information required.