Author Topic: False Positive - Service Disabled  (Read 2008 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
False Positive - Service Disabled
« on: October 24, 2014, 08:15:58 PM »
I have an application that Avast is treating as a virus.  It seems to be doing 2 things:
1.  Deleting a key .exe file
2.  Disabling the database service

I have added an exclusion in the shield settings and that does seem to be working.  But I can't figure out how to get it to stop disabling the service.  Can anyone point me in the right direction?

Thanks!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67185
Re: False Positive - Service Disabled
« Reply #1 on: October 24, 2014, 08:36:32 PM »
Do you have the process path of the service running?
Something like "C:\Windows\SysWow64\IntelCpHeciSvc.exe". Entering it as an exception will work or not?
The best things in life are free.

REDACTED

  • Guest
Re: False Positive - Service Disabled
« Reply #2 on: October 27, 2014, 02:52:22 PM »
Yes the path is C:\Program Files (x86)\In-Synch\RMSDBSyncService.exe.

I set up a File System Shield exclusion for C:\Program Files (x86)\In-Synch\* so it stopped deleting the executable. 

It's not disabling the service constantly, just every now and then.  I haven't found a pattern yet.  I spoke to the software vendor and they've noticed it on other networks.  Apparently if you re-enable it several times it eventually stops disabling it. 

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67185
Re: False Positive - Service Disabled
« Reply #3 on: October 28, 2014, 12:20:03 AM »
Thanks for the feedback.
Please, use http://www.avast.com/contact-form.php for reporting potential false positive (archive or site wrong detections).
The best things in life are free.