Avast WEBforum

Business Products => Avast Business => Topic started by: Trafford on May 10, 2017, 11:22:45 AM

Title: Cygwin SSH service continually caught by behaviour shield
Post by: Trafford on May 10, 2017, 11:22:45 AM
Hi, since updating Cygwin to the latest version, sshd.exe (running as a Windows service) is being continually flagged by Avast behaviour shield:

One of your programs is behaving strangely, which could be a sign of malware.
Path: D:\Cygwin\usr\sbin\sshd.exe
Infection: IDP.Generic


If you choose the "Ignore" action, the dialogue box will disappear, but will reappear a short time later.

Support info:

With thanks in advance,
Rob
Title: Re: Cygwin SSH service continually caught by behaviour shield
Post by: Manley on May 10, 2017, 03:29:24 PM
I know it seems stupid, but Avast is asking all false positives to be reported here: https://www.avast.com/false-positive-file-form.php

They have acknowledged the Behavior Shield isn't great, and submitted reports will help fix issues.
Title: Re: Cygwin SSH service continually caught by behaviour shield
Post by: Trafford on May 10, 2017, 05:41:29 PM
Ah, really useful, thanks for your help! ;)
I've submitted the file using the form as suggested.

Best regards,
Rob