Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: mrsparrow on July 27, 2010, 11:49:59 AM

Title: Avast confuses a software with a virus - what should I do?
Post by: mrsparrow on July 27, 2010, 11:49:59 AM
Hi,

I recently installed a new software on my computer but immediately after installation Avast moves the .exe file of that software into the virus chest.
Thus I am unable to run the software and I really need it!

I tried to exclude the whole folder from being scanned by Avast, but even so, immediately after I place the .exe file in there it still gets removed.

Can anybody help me out with a viable solution?

Thanks!
Title: Re: Avast confuses a software with a virus - what should I do?
Post by: igor on July 27, 2010, 12:04:29 PM
Well, first you could tell us what software is that and what virus avast! reports there...
Title: Re: Avast confuses a software with a virus - what should I do?
Post by: mrsparrow on July 27, 2010, 12:13:03 PM
The software is called SENuke and it's for SEO purposes. And Avast detects it as being a Win32:VBMod [Trj]

How come if I exclude the whole folder from scanning, Avast will still find and remove the .exe file?

Title: Re: Avast confuses a software with a virus - what should I do?
Post by: DavidR on July 27, 2010, 04:51:03 PM
Because I believe you are excluding it from on-demand scans, avast Settings, Exclusions and it is being detected by the File System Shield, Expert settings, Exclusions.

Excluding the whole folder is leaving a hole in your security, you should change the \* at the end of the path to \file_name.exe of the executable file.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\*
That will stop the File System Shield scanning any file you put in that folder.