Author Topic: How to set exclusion  (Read 6265 times)

0 Members and 1 Guest are viewing this topic.

Frank1

  • Guest
How to set exclusion
« on: April 14, 2010, 07:16:34 AM »
Hello,
I have a file that Avast catches as a Worm and will not let me execute it. I checked it with other virus checkers on-line, and most do not find a virus in the file. I turned Avast off and executed the file under Sandboxie and the file does not create files. I have used this file before with no warning and caused no problem.

I tried to set an exclusion for this file, but it does not set an exclusion for the "Resident Protection". How do I setup Avast so that I can execute this file without getting the warnings?
Thanks

Offline Yanto.Chiang

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1372
  • Soli Deo Gloria
    • PT Garuda Sinatriya Globalindo
Re: How to set exclusion
« Reply #1 on: April 14, 2010, 01:33:18 PM »
Hi Frank,

If related with File, then you may do :
1. Open avast! 5.0 GUI
2. Go to Real Time Shield
3. Go to File System Shield Tab and then click Expert Settings
4. After that you may choose Exclusions, then you may click Add and then browse which file you want to exclusions
5. After that you may click OK

Hope this would resolved your issues.

cheers,
Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya

Frank1

  • Guest
Re: How to set exclusion
« Reply #2 on: April 14, 2010, 01:57:54 PM »
Yanto, thank you for your reply.

I am using Avast Free version 4.8. Tried to update, but was told that I am up to date. I do not know V5.0 GUI and cannot find the Real Time Shield.
Please help with this.
Thanks

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89675
  • No support PMs thanks
Re: How to set exclusion
« Reply #3 on: April 14, 2010, 04:12:45 PM »
Before excluding anything, it is advisable to confirm, you don't say what the other scanners were.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? 
Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe
 
- Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log and copy and paste the entry.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

- avast4 - Create a folder called Suspect in the C:\ drive. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

- GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP if only those two detect it.
- In the meantime, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions (right click the avast ' a ' icon)
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Frank1

  • Guest
Re: How to set exclusion
« Reply #4 on: April 15, 2010, 12:15:45 AM »
David,
The last section in your reply did it:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions.

I checked the file with Virus Total. There were numerous virus checkers that did not consider my file containing a virus. Under normal conditions, I would just delete this file. However, I used this file numerous times before without any trouble. Last time was around 6 months ago (no problem). Now I get these alerts. I think it's the way the Avast database changed over this time. But that's o/k, now that I can accept this file.
Thanks again.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89675
  • No support PMs thanks
Re: How to set exclusion
« Reply #5 on: April 15, 2010, 12:57:22 AM »
It isn't so much the number of scanners that don't consider it infected, rather the number of scanners that do and which those scanners are. This is why we ask for a link to the virustotal results page.

Even assuming that it is a false positive the job isn't done and exclusion only helps one person, reporting it to avast as a false positive so that the signatures can be corrected thus helping all avast users that have this file.

~~~
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.
 
Or you can also send it from the Infected Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Frank1

  • Guest
Re: How to set exclusion
« Reply #6 on: April 15, 2010, 02:24:53 AM »
I agree. I sent the file to emailed the file to Avast.
Thanks a lot.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89675
  • No support PMs thanks
Re: How to set exclusion
« Reply #7 on: April 15, 2010, 02:30:39 AM »
You're welcome, thanks for sending it to avast.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security