Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: cheater87 on May 08, 2011, 11:29:11 PM

Title: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: cheater87 on May 08, 2011, 11:29:11 PM
It says to put it in the sandbox which is recommended but her internet is down and she does not know if this is causing it or not. Her internet has been wonky for a while so avast has not been updated. Please respond soon ASAP. She has open in sandbox, open normal or cancel opening. What does cancel opening mean? Does it stay on the HDD and just not stay opened. The file origin says c:/windows/system32/TPSmain.exe
Title: Re: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: Dch48 on May 08, 2011, 11:30:58 PM
TPSmain is a Toshiba power saver file and should be perfectly safe.
Title: Re: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: cheater87 on May 08, 2011, 11:35:05 PM
Why is the sandbox reporting this file? I'm guessing she should hit open as normal then?
Title: Re: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: Dch48 on May 08, 2011, 11:48:32 PM
Quote from: cheater87 on May 08, 2011, 11:35:05 PM
Why is the sandbox reporting this file? I'm guessing she should hit open as normal then?
I would say yes and tell Avast to remember the answer so it doesn't alert again. The file is probably performing actions common to other things that are actually malicious so Avast is finding it suspicious.
Title: Re: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: DavidR on May 08, 2011, 11:50:15 PM
Quote from: cheater87 on May 08, 2011, 11:35:05 PM
Why is the sandbox reporting this file? I'm guessing she should hit open as normal then?
Probably also because of its location (system32) and it probably isn't digitally signed.

If you/she are/is happy about its origin and legitimacy then Yes open it normally and have her check the Remember my decision for this program.
Title: Re: My friend's sandbox came up saying it found c:/windows/system32/TPSbattM.exe
Post by: cheater87 on May 09, 2011, 12:03:24 AM
Thanks we did as recommended.