Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Endpoint Protection => Topic started by: KDibble on April 22, 2020, 04:39:34 PM

Title: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: KDibble on April 22, 2020, 04:39:34 PM
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...) on Windows 7 machines. Anyway...

Yesterday I ran a full scan of a Win 7 Ultimate machine (including delete content inside archives). It deleted a mere PICTURE (a PNG screen shot) of a Microsoft Word "enable this content" screen from inside of a PowerPoint presentation. It also deleted the actual PNG file that I had used for the presentation. Fortunately I have a copy of the PowerPoint elsewhere. If I want the actual PNG I can just take a screenshot of that. And then what, will avast! delete that PNG?

It's an IT Security training presentation. Of COURSE it's going to contain pictures of dangerous stuff. I mean, come on guys, really??

Yes, I'll file a false positive report.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: KDibble on April 22, 2020, 05:08:00 PM
I uploaded the original PowerPoint File to VirusTotal. The only engines that had a problem were Avast and Avast-owned AVG:

https://www.virustotal.com/gui/file/d15a8def4f35f098d11750c55e853491eb6a8867ca8d864829302eb8feee5eff/detection

However, the VirusTotal details don't appear to provide any justification for these findings. It's probably a brain-dead heuristic instead of an actual detection of dangerous code.

I filed a false positive report.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: bob3160 on April 22, 2020, 05:44:30 PM

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: KDibble on April 22, 2020, 06:16:36 PM
Yes. as I said (twice), I reported the false positive.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: bob3160 on April 22, 2020, 06:28:15 PM
I've reported it to Avast. Let's see if that helps.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: KDibble on April 22, 2020, 07:57:21 PM
I've reported it to Avast. Let's see if that helps.

Thank you.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: Asyn on April 23, 2020, 06:00:07 AM
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...)
Read here: https://forum.avast.com/index.php?topic=233272.0
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: KDibble on April 23, 2020, 04:22:28 PM
Thank you. First, I've been notified by email that this false positive has been removed.

As to the thread about the end of support for that version referenced by Asyn, I've posted a response in that discussion. I will only repeat here that Avast should directly notify its paying customers, in advance, by email, of events like this rather than requiring us to constantly monitor a website that is largely manned by volunteers to find out about such important news. No, the resellers cannot be relied upon to do this. The only time my reseller talks to me is when they want me to buy another subscription.
Title: Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
Post by: Asyn on April 24, 2020, 06:02:52 AM
You're welcome.