Author Topic: PUPs picked up in boot scan with heuristics at max  (Read 2860 times)

0 Members and 1 Guest are viewing this topic.

UnbelievableDeveloper

  • Guest
PUPs picked up in boot scan with heuristics at max
« on: June 22, 2013, 06:08:45 PM »
Hi, I use windows 7 Home SP1 (updated regularly) and Avast! Free 8.  I just ran a boot scan with heuristics at the maximum and the following three files were considered to be PUPs:

File :                          Location:

enterpricec.config.cch   c:\windows\microsoft .net\framework\v2.0.50727\CONFIG

security.config.cch        c:\users\owner\appdata\roaming\microsoft\clr security config\v2.0.50727.312

security.config.cch        c:\windows\microsoft.net\framework\v2.0.50727\config     

So, are these bad, or false positives because of the high heuristics setting?  Thanks in advance for all replies!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: PUPs picked up in boot scan with heuristics at max
« Reply #1 on: June 22, 2013, 06:51:59 PM »
Most probably FPs because of the high heuristics setting.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

UnbelievableDeveloper

  • Guest
Re: PUPs picked up in boot scan with heuristics at max
« Reply #2 on: June 22, 2013, 11:10:15 PM »
Most probably FPs because of the high heuristics setting.

That's what i figured, so I let them out of the virus chest and turned down the heuristics to normal for next time. 
.NET and CLR are things that microsoft compiled languages use, so they must be a FP, like you said.  I wish the
file shield would stop claiming that pngopt.exe is a suspected EVO-32 gen too.  For this, I turn off the file shield
whenever I want to optimize my .pngs.  And...thanx for the feedback!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: PUPs picked up in boot scan with heuristics at max
« Reply #3 on: June 23, 2013, 07:59:28 AM »
1. I wish the file shield would stop claiming that pngopt.exe is a suspected EVO-32 gen too.  For this, I turn off the file shield whenever I want to optimize my .pngs. 
2. And...thanx for the feedback!

1. You can report a possible FP here: http://www.avast.com/contact-form.php
2. You're welcome.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0