Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: bigluo on July 13, 2007, 09:31:38 AM

Title: Does "Win32:AirCrack [Tool]" really a virus?
Post by: bigluo on July 13, 2007, 09:31:38 AM

i download WinAircrackPack from the net, when download finished, AVAST report the file contains a virus named "Win32:AirCrack [Tool]" .

from the virus' name, i think may be this is not a virus, but the software's behavior like a virus, so AVAST report it, does my thought right or wrong?

Thanks.

Title: Re: Does "Win32:AirCrack [Tool]" really a virus?
Post by: bri on July 13, 2007, 09:50:23 AM

check the file here and see results

http://virusscan.jotti.org/

Title: Re: Does "Win32:AirCrack [Tool]" really a virus?
Post by: bigluo on July 13, 2007, 10:09:14 AM

accord to the result from:
http://virusscan.jotti.org/ and http://www.virustotal.com
this is not a virus, but a hacker tools...

Title: Re: Does "Win32:AirCrack [Tool]" really a virus?
Post by: Lisandro on July 13, 2007, 01:46:24 PM

So, at least, avast detection is trying to alert you from this situation.
It's up to you keep a riskware in your computer.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be carefull, you should 'exclude' that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file -  there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
or http://forum.avast.com/index.php?topic=7779.msg62586#msg62586

Title: Re: Does "Win32:AirCrack [Tool]" really a virus?
Post by: DavidR on July 13, 2007, 03:17:05 PM

Quote from: bigluo on July 13, 2007, 10:09:14 AM

accord to the result from:
http://virusscan.jotti.org/ and http://www.virustotal.com
this is not a virus, but a hacker tools...

And that is why avast has the suffix [Tool] at the end of the detection, the problem being a tool can be used for good or evil and an AV can't determine which.