Author Topic: False positive in Slysoft sofware  (Read 6470 times)

0 Members and 1 Guest are viewing this topic.

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
False positive in Slysoft sofware
« on: August 03, 2005, 12:58:17 AM »
Avast detected the virus Kelvir-z (add today new update) in  c:/programs files\slysoft\anydvd\rgdrvls.exe

and c:/programs files\slysoft\clonecd\rgdrvls.exe

I dont think that they are virus. These are legitme not freeware software. I sent the files to avast. I check it in jotti page and only avast and Antivir detect it. Antvir detected it as bafis or bafir.
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: False positive in Slysoft sofware
« Reply #1 on: August 03, 2005, 03:25:59 AM »
Please, don't take so long to solve this...  :'(  :'(

Calcu, maybe you can add this file to the two exclusions lists of avast (Standard Shield and on-demmand scanning).
The best things in life are free.

Sam FT

  • Guest
Re: False positive in Slysoft sofware
« Reply #2 on: August 03, 2005, 06:05:22 AM »
Yes I wish Avast would pleast fix this.  The RgDrvls.exe file is legal and is used by Slysoft under both CloneCD and AnyDVD.

MFB

  • Guest
Re: False positive in Slysoft sofware
« Reply #3 on: August 03, 2005, 07:01:00 AM »
Avast detected the virus Kelvir-z (add today new update) in  c:/programs files\slysoft\anydvd\rgdrvls.exe

and c:/programs files\slysoft\clonecd\rgdrvls.exe

I dont think that they are virus. These are legitme not freeware software. I sent the files to avast. I check it in jotti page and only avast and Antivir detect it. Antvir detected it as bafis or bafir.


Make sure you also send the file to Anti Vir so that they may fix the problem if it is a false positive.

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
Re: False positive in Slysoft sofware
« Reply #4 on: August 04, 2005, 02:47:01 AM »
Resolved in latest update
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: False positive in Slysoft sofware
« Reply #5 on: August 04, 2005, 03:24:42 AM »
Please, don't take so long to solve this...  :'(  :'(
I'm very happy and proud of the speed of VPS update...  8) ;)
The best things in life are free.

Stewy

  • Guest
Re: False positive in Slysoft sofware
« Reply #6 on: October 02, 2005, 03:36:50 PM »
I have run tests on this file (RgDrvls.exe, from SlySoft) with online scanners , and it indeed  is being reported as suspicious and not to be trusted "maybe", this file is a newfile and is not in the previous versions of AnyDvd from SlySoft, so maybe is is Malware ? has anyone heard anything else

zivilist

  • Guest
Re: False positive in Slysoft sofware
« Reply #7 on: October 02, 2005, 07:21:37 PM »
another false positive?

I download anydvd directly from slysoft today:

02.10.2005 19:13:19   SYSTEM   524   Sign of "Win32:Ircbot-BG [Trj]" has been found in "C:\Program Files\SlySoft\AnyDVD\RgDrvls.exe" file.

Latest Avast Home Edition+VPS installed.
« Last Edit: October 02, 2005, 07:23:11 PM by zivilist »

Erroneus

  • Guest
Re: False positive in Slysoft sofware
« Reply #8 on: October 02, 2005, 07:28:34 PM »
Hmm something wrong with the lastest VPS?

Getting the same false positive, but in G6FTPServer.exe which is a part of Gene 6 FTP server.
http://forum.avast.com/index.php?topic=16724.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: False positive in Slysoft sofware
« Reply #9 on: October 02, 2005, 07:40:18 PM »
You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a  false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

If it is indeed a false positive, add it to the exclusions lists and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Super Trooper

  • Guest
Re: False positive in Slysoft sofware
« Reply #10 on: October 02, 2005, 10:02:55 PM »
another false positive?

I download anydvd directly from slysoft today:

02.10.2005 19:13:19   SYSTEM   524   Sign of "Win32:Ircbot-BG [Trj]" has been found in "C:\Program Files\SlySoft\AnyDVD\RgDrvls.exe" file.

Latest Avast Home Edition+VPS installed.

I get the exact same virus warning as zivilist with the exact same file (RgDrvls.exe) using the latest home version / updates but it finds it in CloneDVD2. Gotta be a false positive I guess but hope its fixed in the next VPS update.  :P
« Last Edit: October 02, 2005, 10:06:06 PM by SuperTrooper »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: False positive in Slysoft sofware
« Reply #11 on: October 02, 2005, 10:07:10 PM »
If you do as I suggested it will confirm it one way or another.

Can you resize your avatar as the forums try to keep to 100X100, thanks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Erroneus

  • Guest
Re: False positive in Slysoft sofware
« Reply #12 on: October 03, 2005, 12:39:51 AM »
Update AVS, should be fixed in latest version 0539-6

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
Re: False positive in Slysoft sofware
« Reply #13 on: October 03, 2005, 03:59:25 AM »
Yes, it was fixed in the latest VPS update
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS

Super Trooper

  • Guest
Re: False positive in Slysoft sofware
« Reply #14 on: October 03, 2005, 06:02:26 PM »
Yep, all sorted. No longer shown as a virus. Nice one Avast!  ;D