Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Kyle_Katarn on August 30, 2008, 01:20:56 PM

Title: Relevant Knowledge unduly detected by Avast
Post by: Kyle_Katarn on August 30, 2008, 01:20:56 PM
Relevant Knowledge is unduly detected by Avast now that comScore / RK is on the TRUSTe white list : http://www.truste.org/pvr.php?page=td_licensees
Title: Re: Relevant Knowledge unduly detected by Avast
Post by: Kyle_Katarn on August 30, 2008, 01:25:31 PM
Please fix because Avast pop ups are no longer justified and becomes a burden.......
Title: Re: Relevant Knowledge unduly detected by Avast
Post by: Lisandro on August 30, 2008, 02:13:10 PM
Dr. Web returns clean for that page, can you post the name of the malware detected by avast?
Title: Re: Relevant Knowledge unduly detected by Avast
Post by: Kyle_Katarn on August 31, 2008, 10:59:38 AM
"Win32:Adware-gen [Adw]" which seems to be too generic.

A file containing RK can be found here : http://www.kcsoftwares.com/?download

Thank you !
Title: Re: Relevant Knowledge unduly detected by Avast
Post by: DavidR on August 31, 2008, 04:20:26 PM
What is the infected/suspect file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? 
Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below. I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.
Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451 (http://forum.avast.com/index.php?topic=34950.msg293451#msg293451), how to report it to avast! and what to do to exclude them until the problem is corrected.
Title: Re: Relevant Knowledge unduly detected by Avast
Post by: essexboy on August 31, 2008, 11:07:24 PM
I would not call it a false positive http://research.sunbelt-software.com/threatdisplay.aspx?name=Marketscore.RelevantKnowledge&threatid=15129

Quote
Adware, also known as advertising software, displays third-party advertising on the computer. The ads can take several forms, including pop-ups, pop-unders, banners, or links embedded within web pages or parts of the Windows interface. Some adware advertising might consists of text ads shown within the application itself or within side bars, search bars, and search results. Adware is often contextually or behaviorally based and tracks browsing habits in order to display ads that are meant to be relevant to the user.