Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: ianb on October 20, 2004, 10:48:46 PM

Title: False Positive
Post by: ianb on October 20, 2004, 10:48:46 PM
Strange.  I've used Avast and been testing other AVs and never seen this detected before.  Tonight I had an Avast update and this was detected as a trojan.  False Positive ?

I have sent the file to Avast.

Title: Re:False Positive
Post by: Vlk on October 20, 2004, 11:03:51 PM
Is it with VPS version 0443-0 or 0443-1? If 0443-0, please update to 0443-1 and retry. Thanks.
Title: Re:False Positive
Post by: c0Ld on October 21, 2004, 03:32:07 AM
I just got this too with the newest update.
It detected clonecd as a trojan :/
Title: Re:False Positive
Post by: bountyhunter1.0 on October 21, 2004, 04:32:11 AM
What is the CloneCD.exe file? is that an avast executable or something?

Title: Re:False Positive
Post by: c0Ld on October 21, 2004, 05:19:47 AM
CD burning software.
Update: it also called the Avast External Controller a trojan.
Title: Re:False Positive
Post by: igor on October 21, 2004, 09:37:06 AM
Does it still happen with 0443-1 VPS?
Title: Re:False Positive
Post by: ianb on October 21, 2004, 10:45:25 AM
Im at work at the moment Igor but will let you know later if it still happens with with 0443-1 VPS.
Title: Re:False Positive
Post by: RejZoR on October 21, 2004, 01:57:10 PM
My programs were fixed yesterday at 8 PM i think. Thanks for fast fix :)
Title: Re:False Positive
Post by: laf58 on October 21, 2004, 06:08:04 PM
That happened to me too with 0443-1 VPS. OS win XP Pro, SP2.
Title: Re:False Positive
Post by: ianb on October 21, 2004, 06:15:34 PM
All fine now with 0443-2 VPS.

Also thanks for the quick email response from Avast.  Great service.
Title: Re:False Positive
Post by: bob3160 on October 21, 2004, 09:32:05 PM
I'm, getting a warning on a program called:
C:\Program Files\Evrsoft\1st Page 2000\IScripts\Buttons\Six Buttons from hell.izs
Which checks out clean at Jotti and also braught up no warnings when the instalation program was checked by ashQuick. This is part of
 Evrsoft 1st Page 20000. I sent it in to Alwil yesterday but am still waiting for an answer. :'(
Any help would be greatly appreciated. Thanks :)
Title: Re:False Positive
Post by: bob3160 on October 22, 2004, 01:08:39 AM
I believe I've found my own answer.
Alert: "Six Buttons From Hell"
The 1st Page software includes various JavaScript examples, including a "practical joke" called Six Buttons From Hell. Some virus scanning software will identify this script as the js/winbomb trojan. YoHost recommends deleting this file after you install 1st Page (or skipping the file during installation). Deleting this file will not affect the operation of the program. More information is here.
The file is typically installed as: C:\Program Files\Evrsoft\1st Page 2000\IScripts\Buttons\Six buttons from hell.izs
YoHost believes the 1st Page developers made a bad choice by including the "Six Button" example, but we have no connection with the developers.


I'll save an additional post and thank myself for being so helpful. ;D ;D ;D
Title: Re:False Positive
Post by: RJARRRPCGP on October 22, 2004, 02:17:23 AM
Huh? The only time I have gotten false alarms was when heuristics was enabled. Is heuristics enabled?

Heuristics is automatically enabled when the protection level is set to high, AFAIK.
Title: Re:False Positive
Post by: bob3160 on October 22, 2004, 02:37:44 AM
Huh? The only time I have gotten false alarms was when heuristics was enabled. Is heuristics enabled?

Heuristics is automatically enabled when the protection level is set to high, AFAIK.
RJARRRPCGP
Heuristics is only used in e-mail scans and is NOT available in the Home version.
Title: Re:False Positive
Post by: Lisandro on October 22, 2004, 03:06:54 AM
Heuristics is only used in e-mail scans

Fully right!

and is NOT available in the Home version.

Wrong  :P
Both Home and Professional have the Heuristic module for emails  ;)
Title: Re:False Positive
Post by: CharleyO on October 22, 2004, 10:52:30 AM
*

Yes, my Home version has the Heuristic module for emails.

*