Avast WEBforum
Other => Viruses and worms => Topic started by: Wakenaam on February 08, 2010, 11:15:22 PM
-
Friends: I have been using my favourite screensaver for years now under different computers and different AV softwares without a problem. Now Avast (Version 5.0.396) is telling me this screensaver is a Trojan and keeps blocking it. I tried to put it under "exclusions" but it still keeps flagging it. How can I get around this? Thanks for any help.
-
First confirm the detection (or otherwise).
Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
- avast5 - Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\* That will stop the File System Shield scanning any file you put in that folder. Now enter the chest again and Extract the file to the Suspect folder and upload it to VT.
Which exclusions there are two ?
- GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP if only those two detect it.
- In the meantime (if you accept the risk), add it to the exclusions lists:
File System Shield, Expert Settings, Exclusions, Add (ensure you allow execution of the file) and
avast Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.
Send the sample to avast as a False Positive:
Open the chest and right click in the Chest and Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.
-
DavidR: Many thanks for your response. I have it working now, thanks to your advice. Appreciate. Cheers!!!
-
No problem, glad I could help.
A belated welcome to the forums.