Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: timarose on July 16, 2008, 09:31:39 AM

Title: Win32Pad Avast has killed this program
Post by: timarose on July 16, 2008, 09:31:39 AM
Avast has killed this program. After running a few mins I get a warning a virus has been detected an it deletes the file in system32 were some of the files are for the program. And then the program stops working. Please fix.

Win32Pad 1.5.10.4 small, fast and powerful text editor

Homepage
http://www.gena01.com/win32pad/
Title: Re: Win32Pad Avast has killed this program
Post by: alanrf on July 16, 2008, 09:51:50 AM
As you have already been told avast does not delete anything unless you tell it to.  You made the decision to delete the file from the choices avast has offered you.  If you have decided that you want avast to delete files that appear infected that is also your choice.

Far better to take the option to move apparently infected files to the chest while you consider what to next.  If it turns out (as you suspect in this case) that it is a false positive you can restore the file to its original location from the chest.  You also have the option to tell avast to take no action on the file and you can, if you are sure of a false positive, put the file in the avast exclusion list until the false positive is corrected by the avast team.
Title: Re: Win32Pad Avast has killed this program
Post by: Maxx_original on July 16, 2008, 10:12:04 AM
again - i can't confirm the false detection...
Title: Re: Win32Pad Avast has killed this program
Post by: wyrmrider on July 16, 2008, 04:24:43 PM
timarose
you have two threads open
different subjects but pleas provide a link between them just in case there is a connection
thanks
Title: Re: Win32Pad Avast has killed this program
Post by: Lisandro on July 17, 2008, 04:17:30 AM
again - i can't confirm the false detection...
What do you mean? Isn't it a false positive?
Title: Re: Win32Pad Avast has killed this program
Post by: Vladimyr on July 17, 2008, 05:13:35 AM
Tech
Maxx_original means that it is neither a true or false positive. It's not detected as a threat by avast!
Title: Re: Win32Pad Avast has killed this program
Post by: Lisandro on July 17, 2008, 05:14:56 AM
It's not detected as a threat by avast!
So it's a clean file? ???
Title: Re: Win32Pad Avast has killed this program
Post by: Vladimyr on July 17, 2008, 05:26:06 AM
timarose

If avast! or any other legitimate security program is deleting this and other non-threats on your system and no-one elses, it could be that something on your system is either infecting these files so that avast! identifies them as a threat which can't be quarantined and so deletion is the only option, or falsely deleting them for some malicious purpose.
Title: Re: Win32Pad Avast has killed this program
Post by: Vladimyr on July 17, 2008, 05:28:46 AM
It's not detected as a threat by avast!
So it's a clean file? ???

Yes. As is Spystopper Pro http://forum.avast.com/index.php?topic=37106.0
Title: Re: Win32Pad Avast has killed this program
Post by: wyrmrider on July 17, 2008, 06:06:40 AM
Just because avast does not detect it does not mean that it is a clean file
has this handy dandy editor to virus total?  perhaps something is infecting it
did you download this from the vendor webpage or through a link? ad?
Title: Re: Win32Pad Avast has killed this program
Post by: Vladimyr on July 17, 2008, 06:47:22 AM
I'm just trying to ignore the least likely.  :)

1/. avast! does not delete by default.
In both cases
2/. I downloaded from the link supplied by timarose (reasonable assumption made that he/she actually installed file from the source quoted rather than from some other site not mentioned).
3/. Jotti and Virustotal found nothing
4/. avast!, Bitdefender & Threatfire found nothing to object to on test PC.
5/. Programs installed and remain on test PC (Spystopper is annoying but so far it's still there).