Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: marciton on January 13, 2009, 11:05:18 PM

Title: Avast detect a virus on a tool ... EjectUSB
Post by: marciton on January 13, 2009, 11:05:18 PM

Hello,
AVAST detect a Worm on the tool Eject USB from : http://www.pocketappreview.com/main/item/17

how can I continue to use AVast and and use the tool ?

Title: Re: Avast detect a virus on a tool ... EjectUSB
Post by: DavidR on January 13, 2009, 11:34:57 PM

You should check the offending/suspect to confirm or deny the detection file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451 (http://forum.avast.com/index.php?topic=34950.msg293451#msg293451), how to report it to avast! and what to do to exclude them until the problem is corrected.

Title: Re: Avast detect a virus on a tool ... EjectUSB
Post by: polonus on January 13, 2009, 11:41:53 PM

Hi marciton,

Some AV’s (like MacAfee, and now avast apparently), think it could be virus because it uses handles and hooks in order to close applications running on your usb, and then eject it. That is why it is flagged.
At their blog (appaholic.co.uk) it is stated that the application/tool is not a virus, so it may well be a false positive, detected by avast's heuristics.
If you have any doubts, try using virustotal.com
you can upload any file there and it tests it against various av scanners at once.
Please post the virustotal results here in your next posting,

polonus

Title: Re: Avast detect a virus on a tool ... EjectUSB
Post by: Lisandro on January 14, 2009, 01:18:36 AM

I think this tool could bypass the avast self protection module and it's being flagged.
There is a second possibility, the tools is indeed infected.
Seems ok http://www.virustotal.com/pt/analisis/18ce2fcf7040093a1c881f05338a3abc
I've downloaded the file right now and avast does not detect it as infected.

By the way, I won't install it anymore.
I'd rather use http://quick.mixnmojo.com/downloads?download=USBDiskEjector1.1.2.zip