Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: drksky on October 02, 2010, 09:22:40 PM
-
WoW was working fine this morning and now Avast is reporting a battle.net cache file as Malware/Gen32.
Pausing the Standard Shield solves the problem.
Tried to submit a false positive, but kept getting a message says "File is not packed".
-
I have the same problem, although I am reluctant to pause the shield as I have been hacked before.
Avast please sort this out.
-
I had the same issue as well, but with the starcraft II game instead of warcraft. again it was a file in the battle.net cache. I talked to blizzard tech support and they said they were getting reports today from several avast users with this false positive. the file is used to authenticate with battle.net servers. here is the location of my file:
C:\ProgramData\Blizzard Entertainment\Battle.net\Cache\36\b2\(really long filename with letters/numbers here).auth\[UPX]
I stopped on-access protection and it works now, but I would rather not have to stop that while playing.
-
Same problem stopping "File System Shield" fixes problem temporarily, wow forums are lit up with the same issue, problem might affect thousands of ppl >.<
i like avast but ill have to get another antivirus if this isnt fixed within a day
-
Having the same issue with World of Warcraft. Turning off "File System Shield" allows me to login/play, but this is something I'd like to avoid. Did report as a false positive, is there a way to get this fixed sooner rather than later?
-
Not just the free version, Pro is doing it too so likely all Avast versions.
Get this sorted, Avast.
-
I've been working on it for the past hour and I think I've found a workaround.
If you open avast! and go down to Real-Time Shields, then select File System Shield and then click the Expert Settings button you'll get a dialog box pop up. From there, select Exclusions and add a new exclusion to the list.
Personally I added:
C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment\Battle.net\Cache\36\*
As this only allows it to stop scanning where it thinks it has found the Win32:Malware-Gen, and it doesn't require you to take down any of your protection.
I tried to log into World of Warcraft after this and didn't get a single flag-up or error- my characters loaded straight away.
Hope this helps.
Moggie
-
For the moment, rather than turning off the "File System Shield" every time I'd like to launch WoW, I've made an exclusion for the directory in which the file getting flagged is located.
Open up your Avast! User Interface
Go to Real Time Shields
Go to File System Shield
Click Expert Settings
Go down to Exclusions
Add "C:\ProgramData\Blizzard Entertainment\"
Click OK and launch WoW, should work fine.
(This worked on Windows 7, not sure how different the file directory is on XP or Vista)
Again this is just temporary while Avast! sorts out the problem, although I felt it would be better than turning off the File System Shield all together.
-
Beat me to it! Haha, cheers. 8)
-
Fix me :(
-
Ive just found the exclusion fix and come here to post it but was beaten!
This is ridiculous, Id rather not have anything in the exclusions but if it sorts it out for now then fine.
Avast need to get on this soon as.
-
tnx blaineevans
Open up your Avast! User Interface
Go to Real Time Shields
Go to File System Shield
Click Expert Settings
Add "C:\ProgramData\Blizzard Entertainment\"
Click OK and launch WoW, should work fine.
-
Same problem here. Using the Pro version 5.0.677
-
I'm having this exact same problem. I'm also on Windows XP, and I can't find anything marked "Go to Real Time Shields" or "Expert Settings" to try and disable this. I found Exclusions, and added the Blizzard Entertainment folder, but I'm STILL getting the virus warning and unable to log in.
Avast, PLEASE fix this!!
Edit: Got in by disabling On-Access Protection just long enough to log in. I don't like doing that, but again, please fix this ASAP.
-
1. confirm detection.
2. if confirmed as an FP, report it to avast, by sending the file for analysis.
####
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\*
That will stop the File System Shield scanning any file you put in that folder.
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.
~~~~
That way it resolved the problem for all avast and wow users, rather than everyone having to take exclusion actions.
- In the meantime (if you accept the risk), add the full path to the file to the exclusions lists (not just the folder as that leaves a large hole in your defences):
File System Shield, Expert Settings, Exclusions, Add and
avast Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.
-
I'm having this exact same problem. I'm also on Windows XP, and I can't find anything marked "Go to Real Time Shields" or "Expert Settings" to try and disable this. I found Exclusions, and added the Blizzard Entertainment folder, but I'm STILL getting the virus warning and unable to log in.
Avast, PLEASE fix this!!
Edit: Got in by disabling On-Access Protection just long enough to log in. I don't like doing that, but again, please fix this ASAP.
You have to add a wildcard at the end of the path: C:\ProgramData\Blizzard Entertainment\Battle.net\*
-
could this be anything to do with the daylight savings timechange in Australia overnight?
-
Im using 4.8 Pro, and I added: C:\ProgramData\Blizzard Entertainment\Battle.net\* to the exclusions but I'm still getting the warning, im using Vista 64bit and I cant seem to find Real Time Shield or Expert Settings or anything remotely close, all I can do is click Settings and Exclusions.
-
Im using 4.8 Pro, and I added: C:\ProgramData\Blizzard Entertainment\Battle.net\* to the exclusions but I'm still getting the warning, im using Vista 64bit and I cant seem to find Real Time Shield or Expert Settings or anything remotely close, all I can do is click Settings and Exclusions.
I ran into this too, I upgraded to 5.0 added exclusion and im now g2g
-
Hello,
it will be fixed in next VPS, it will take around 1-2 hours to release next VPS.
Thanks for your patience.
Best regards
Jan Sirmer
-
Uninstalled Avast. Quickest, easiest way.
-
Uninstalled Avast. Quickest, easiest way.
And will you stay unprotected?
-
And how do i recover the file that i deleted because avast told me it was a virus : "C:\ProgramData\BlizzardEntertainment\Battle.net\Cache\36\b2\36b27cd911b33c61730a8b82c8b2495fd16e8024fc3b2dde08861c77a852941c.auth\[UPX]" ????
-
Why did you delete it?
If you have send to Chest you would be able to restore it...
Or if you were using Comodo Time Machine...
I think right now it's gone forever... Sorry.
-
naaoooo! lol. Avast gave me the option to delete so i did.
-
naaoooo! lol. Avast gave me the option to delete so i did.
I believe those files are randomly generated every time you start WoW. On mine each time I tried to log in, the file name was a bit different. So I don't -think- you have anything to worry about. It's just a temporary file created to get you logged into their system. (Okay yes, I could be mistaken, but that is the impression I get.)
-
I also deleted my file, and I cannot log into WoW now. I get an error message when I try to log in.
Thanks Avast... :(
-
its fine if you deleted the file. i did delete it and i was able to log in to WOW after i added the exclusion
-
its fine if you deleted the file. i did delete it and i was able to log in to WOW after i added the exclusion
dumb question I know, but how do you "Open up your Avast! User Interface" ?
This is from the earlier post on how to add the exclusion. I have the free version and I have never used the User Interface. I can't find anything that will allow me to follow the instructions given for adding the exclusion.
-
Click on toolbar icon
The orange ball
-
Click on toolbar icon
The orange ball
Don't have an "orange ball". I did find where it would start a scan and when I cancelled the scan it took me to a "graphical control thingy". Under menu I found "exclusions" and added what was recommended above (both with and without the "8").
I still cannot log in to WoW. :(
-
I think the quickest, easiest way, is to "Stop On-Access Protection" (that is how it is listed for me using the Free Avast version on Windows XP) -just- long enough to log in. You can turn it back on after it's logged in and move from character to character, and realm to realm, just fine after that. It is only during the initial sign in that this is occurring.
-
I've tried all of the above recommendations, and am still unable to login. I also tried disabling the shields for 10 minutes (so I could re-enable them as soon as I'd logged in) and it still does not allow me to connect. It does still show the "Virus" in my Virus Chest.
Any idea when the new version of Avast! will be out?
-
I have done all the above, with all the suggested extensions. I am running Windows Vista 64 and the free versions of Avast. This is the second time this has happened in the past 6 months to me and it's beyond a joke.
Any DETAILED information on how to deal with this on the free version of Avast would be much appreciated, remembering that not all of us are computer geniuses please. I am not without brainpower but I do not naturally understand all computer terms.
I am highly annoyed, I missed a LK raid *rwar* ;)
Please, some help?
-
Greetings.
I've been a steady fan and user of Avast! for several years now. And i've never had any "serious" problems, untill TONITE.
I play World of Warcraft (WoW) on a daily basis, and often many hours a day. Now, my problem is, i logged on, or tried to at least, my WoW account. But without success... So at first, i figured they were doing maintenance on their servers, but then it hit me, they useually do that midweek, not on the weekends... So i tried to log on, yet again... And again... And tried opening ports in my firewall... Tried changing password on my account, and so on, and so on... But nothing helped... Started getting frustraded... I tried contacting their support team... Tried talking to friends... But still nothing... Then FINALLY... After searching forums, and god knows where else, for up to 5 hours, i FINALLY found a thread with this issue... And the solution, if you can call it that... Was to "Disable" avast! so you can log on ? - And despite my better judgement, i figured.... Hell, let's give it a try, because i was about out of ideas... And bingo... I logged right on, without a hitch...
Now... WHAT THE... I mean... Do i have to make my computer a pitfall for viruses and what nots, in order for me to play my game ? What ya all playing at ? - Fix it, PLEASE !
But apart from that... Thanks for a wonderfull program, and kindly keep up the good work !!!
-
I don't have an orange ball either, it's a blue ball!
-
This problem is also happening for starcraft 2 and all Bnet games.
-
It should be fixed with the 101002-2 VPS update. Update your virus definitions manually.
Greetz, Red.
-
As Red said, the evening VPS update (virus definitions) should fix the FP, as already stated.
If you deleted the file, I have no idea what that could do to your game, best contact Blizz about the consequences of deleting it.
If you have a blue ball you are using old Avast! 4.8, you might think about updating to version5 next time you get spare.
-
Ah i can be of help with this now. To repair world of warcraft either reinstall (takes for ever) Or you could try using the World of Warcraft repair tool.
(http://i53.tinypic.com/30tjvi9.png)
-
. Started getting frustraded... I tried contacting their support team... Tried talking to friends... But still nothing... Then FINALLY... After searching forums, and god knows where else, for up to 5 hours, i FINALLY found a thread with this issue... And the solution, if you can call it that... Was to "Disable" avast! so you can log on ?
Try to keep all in one thread, please>>http://forum.avast.com/index.php?topic=64619.0 (http://forum.avast.com/index.php?topic=64619.0)
Do not throw anything at me, I know what happens when you get between someone and their WoW, ;) but the solution is to stop playing WoW until the next definition update (Gargamel ducks thrown object), or exclude the false positive in expert settings of the Avast! shield that detected it.
-
Ah i can be of help with this now. To repair world of warcraft either reinstall (takes for ever) Or you could try using the World of Warcraft repair tool.
Thanks, hopefully that helps anyone who deleted :)
-
Have you got the latest virus definitions update, 101002-2 as this should have a fix for this problem.
-
I play WoW every day and have not had the issue at all.
-
Hello,
It was fixed in 100202 VPS.
Best regards
Jan Sirmer
-
I am on version 101003-1 and this thing has popped up.
http://www.virustotal.com/file-scan/report.html?id=23451d428a1671e27635e923e9acfd6f8a883acb1f8e6b2a4152f037e5841594-1286149014
C:\Users\name\AppData\Local\Blizzard Entertainment\Battle.net\Cache\23\45\23451d428a1671e27635e923e9acfd6f8a883acb1f8e6b2a4152f037e5841594.auth
I can upload a .rar with the file, if necessary.]
edit: I'm using Windows 7 64
-
Excuse the double post... but I think the reason why this shows up for me is because I haven't played/updated my WoW or SC2 in a few weeks. I'll try updating and post back.
edit: Updating the SC2 client did not solve the issue.
-
Is the problem now only with SC2? I am having no problems with WoW, and never did.
-
I have both games, but I'm not sure. Presumably it's both, as the accounts are the same, and the authenticator is the same?
-
I have got the latest virus update (and its a pro versio) dated today (5th October 2010) and this problem has just started occuring for me again, though it did happen a few days ago. The only way I can login to WOW or SC2 is to turn off the Field System Shield.
There is no virus in my chest but I did get the Malware error a few days ago. I reset the Windows Firewall setting and that seemed to work, but the problem is now back again and previous fixes don't work.
Running Windows 7 64 bit.
-
I have got the latest virus update (and its a pro versio) dated today (5th October 2010) and this problem has just started occuring for me again, though it did happen a few days ago. The only way I can login to WOW or SC2 is to turn off the Field System Shield.
There is no virus in my chest but I did get the Malware error a few days ago. I reset the Windows Firewall setting and that seemed to work, but the problem is now back again and previous fixes don't work.
Running Windows 7 64 bit.
Hello,
send us (virus@avast.com) the file to analyze, please.
Milos
-
There is no file to send, but if I look at the Summary Statistics graph it shows 1 threat last week. I don't know if there is a way to send you a log file of that.
-
bonjour le 10/10/2010 nouveau blocage de la connection world of warcraft par avast ; seul solution désactiver avast
-
The problem is back. I had it on 10/2 it was fixed. WoW worked fine for a couple of days, but this morning its back again.
-
I have Avast! Free, Virus Definitions version 101005-0. Today, when trying to log into World of Warcraft, I got a pop up that a file was moved to the virus chest, and I couldn't log on. I don't see anything in the Alwil Software\Avast5\DATA\log folder to e-mail, but I did submit it as a legit program.
Running Windows 7, 64 bit.
-
I am not a computer knowledgeable person, I don't know how to do some of the suggestions offered. My World of Warcraft just did the battle.net is a virus. I run Windows 7 64bit. I do not play or have a Star Craft account. The only way I can access my WoW account is by stopping Avast. I thought they were going to fix this a few days ago when my roommate had this problem?
-
First time issue today:
http://www.virustotal.com/file-scan/report.html?id=24e0dab53762d83c513db9897ebb8fccf7cc7bf83079d47de361f72646196792-1286299221#
C:\ProgramData\Blizzard Entertainment\Battle.net\Cache\24\e0\24e0dab53762d83c513db9897ebb8fccf7cc7bf83079d47de361f72646196792.auth
Avast Free, v 5.0.677
Virus Definitions: 101005-0
Win 7, 64-bit
Submitted to virus lab.
-
First time issue today:
http://www.virustotal.com/file-scan/report.html?id=24e0dab53762d83c513db9897ebb8fccf7cc7bf83079d47de361f72646196792-1286299221#
C:\ProgramData\Blizzard Entertainment\Battle.net\Cache\24\e0\24e0dab53762d83c513db9897ebb8fccf7cc7bf83079d47de361f72646196792.auth
Avast Free, v 5.0.677
Virus Definitions: 101005-0
Win 7, 64-bit
Submitted to virus lab.
I am having the same problem with the same file. Avast needs to fix this soon.
-
Avast Details
Current version: 101005-1
Release date: 05/10/2010 1:39 PM
Number of defenitions: 2,063,714
Last update attempt: 9 minutes ago
----------------
OS Details
Vista 64bit
legit with service packs and nothing to update from windows updater.
----------------
Avast log file.
05/10/2010 4:51:19 PM C:\ProgramData\Blizzard Entertainment\Battle.net\Cache\24\e0\24e0dab53762d83c513db9897ebb8fccf7cc7bf83079d47de361f72646196792.auth|>[UPX] [L] Win32:Malware-gen (0)
File was successfully moved to chest...
----------------
Same as others , cannot play until i close down Avast.
Free doesnt mean anything if i cant have it running.
Must fix right away before consumers go elsewhere.
There are alot of WOW players that use avast im sure.
Good luck
-
I am now having the same issue. I can't log in to WoW with Avast! running.
If you add C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment\Battle.net\Cache to exceptions in the File System Shield you can log in okay. This is for XP users, it might be different for Vista and 7.
It's probably C:\ProgramData\Blizzard Entertainment\Battle.net\Cache for Vista and W7.
-
There is a long thread about this on the blizzard forums... all avast users are affected.
-
With the newest version of Avast! that just updated today, the problem is back.
There is a REALLY EASY way to get around this, as the problem file is found within the Application Data cache files (NOT THE ONES IN THE PROGRAM DATA OR THE PROGRAM FILES directories).
In Windows XP, go here:
C:\Documents and Settings\All Users\
You'll see one or more Blizzard Entertainment folders. TRASH ALL OF THEM. Don't worry. When you get logged into the game, the whole folder will be replaced...it's a temporary file.
In Windows Vista, in the Start Menu, use the RUN command, and type this:
C:\Users\TypeYourVistaUserNameHere\AppData\
This will take you to that directory, where you'll see these three folders, in the directory at the left:
Local
LocalLow
Roaming
In that directory, click on "Local" and you'll see (in the righthand pane) all the applications with temporary settings. Find ANY/ALL Blizzard Entertainment folders, and delete them. Don't worry...as with the XP setup, these are temporary files, that the game will replace immediately.
That's it. LOG INTO WoW (or whatever other Blizzard.net game you are wanting to play).
You won't have to do this again until the next Avast! update. If Avast! and Blizzard have solved the FALSE POSITIVE problem, all will be well. If they have NOT solved the problem, you will have to do this step over again. I'm sure the two companies WILL solve the problem soon, permanently. So chill, and do the above steps, and play your game. Hope to see you there! (grin)
I should note that when you get logged in, your computer will sound like it's going CRAZY for a few minutes. Don't worry...this is because it's rebuilding the Blizzard Entertainment file that you deleted, with a nice, fresh copy. In a few minutes, your computer will get back to normal.
-
It has been acknowledged and should be resolved in the next VPS update.
-
in my case i play wow in private servers https://www.molten-wow.com/ & http://www.wow-brasil.com/ & tried free wow official trial
in molten-wow avast dosent blocks any thing & in wow-brasil it stops my connection cant pass from login screen & in official trial of wow its works fine.
i tried others private servers and wow-brasil its the only one not working for me.
made test deactivate shields and it worked for wow-brasil i could log in and play.
if any one as a solution for this server pls reply my avast is in Portuguese.
-
I have no problems logging in caused by Avast and never have had. In my opinion though, if you play the game on a private server, you should be prepared to deal with things that don't happen if you go the normal, and proper, route.