Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Doc16743 on February 19, 2017, 04:55:37 PM
-
Avast Free found a "virus" in my overnight scan, and it has been placed in the chest. Right clicking on the file (in the chest) shows "Submit to Virus Lab" as an option. However, when I select this option, nothing happens. Is there supposed to be some type of notification that the file has been sent? Any way I can check to see if it has been sent? I don't expect an immediate response from the lab, but would be good to at least know it was, in fact, sent.
Thanks!
Dave
-
Avast Antivirus: Using the Virus Chest https://www.avast.com/faq.php?article=AVKB21#artTitle
Video >> https://www.avast.com/faq.php?article=AVKB149#artTitle
Why are you sending it to the lab?
-
The file is normally uploaded when the next VPS update occurs, there is normally a notification to that effect when you select Submit to Virus Lab.
Try a manual virus definitions update and watch closely you should see it being uploaded.
-
Thanks for the reply Pondus.
Submitted the file because it is mbam.exe - one of the executables for Malwarebytes. Have had this program for years, and suspect it could be a false positive. It is in the correct directory, but wanted to confirm the status before I take it out of quarantine.
Thanks
Dave
-
OK
-
Thanks DavidR. Appreciate the reply!
Dave
-
You're welcome.
Periodically scan the file from within the virus chest, so you know if it has been cleared as an FP. You can then restore it.
-
Any rough idea how long it takes the lab to check a submission? In my "chest", the "Submit Time" cell is empty, so I have doubts that the file was ever actually submitted. "Submit to Virus Lab..." is an option from right-clicking the file, but using it doesn't appear to actually accomplish anything.
Is "Submit" disabled in the free version, or am I doing something wrong? Everything else seems to be working fine.
Thanks
Dave
-
Sorry I don't have an estimate, I just check the file in the chest periodically to see if it is no longer detected.
As I said before:
"The file is normally uploaded when the next VPS update occurs, there is normally a notification to that effect when you select Submit to Virus Lab."
So you don't see any reaction immediately.
-
Thanks again DavidR. Any other file I probably wouldn't worry about - just delete it. But as this is part of my anti malware suite, it makes me just a little nervous.
Will be patient & see what happens!
thanks
-
Depending on what the anti-malware suite is some files/actions could be considered suspect.
I know it is mbam.exe, but what version of MBAM are you using, what was the alert (malware name) and location ?
I have actually fired up my old 2.2.1.1043 version of MalwareBytes Anti-Malware and no alert on mbam.exe. I tend not to have it enabled to run on startup, just running a right click scan of a file.
I have stayed away from MBAM 3.0 I have a lifetime license but I just don't like the direction MBAM is going (now more of an AV) and I found mbam is getting progressively more bloated.
-
Same / related to this maybe?
https://forum.avast.com/index.php?topic=197479.msg1370441#msg1370441
-
I'm using vers. 3.0.4, and like you, I don't leave it running. I also have the lifetime license. I run a complete scan with it and Avast one night per week.
I named the wrong file when I originally posted. It actually is mbam-setup.exe. Avast reports it as "Win32:DH".
I did consider the fact that one AV checking another might be the issue, but have had MB and Avast for quite a while together with no reports. Almost any other file I would just delete and not give it a second thought.
Just got an update to Avast & still nothing showing for "Submit Time".
Not going to worry about it for now. It's in the chest and isn't going to hurt anything for a while. If it clears I'll restore it. If not I'll cross that bridge when I get to it.
Thanks
-
Avast reports it as "Win32:DH".
Did you read the topic i gave link to? specific last post (from avast team) in that topic
-
Pondus, I think you nailed it! I may just restore the file in a day or two and rescan.
Many thanks, all!
-
Same / related to this maybe?
https://forum.avast.com/index.php?topic=197479.msg1370441#msg1370441
Not sure it is as that topic relates to the installation file, but this one is the main executable mbam.exe. But it would be worth testing at virustotal.com.
Plus avast have confirmed in that topic that that file has now been cleared Reply #12 on: Yesterday at 09:02:11 ยป in the link that you gave.
-
Pondus, I think you nailed it! I may just restore the file in a day or two and rescan.
Many thanks, all!
Scan it in the chest before restoring as that could result in it being detected again and sent back to the chest.
-
Scanned by virustotal and 1/58. The one is a possible adware, but clean for all others.
Saved the link for virustotal for the next time!!
Thanks again!
-
You're welcome.
Whilst virustotal isn't 100% as there are scans that wouldn't be done in an on-demand scan, it does give a pretty good indication.