Author Topic: [FIXED] [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41  (Read 95793 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 65980
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #105 on: February 22, 2017, 10:21:35 AM »
The new VPS (170222-00) should contain the fix. Can you (who are affected) try updating VPS and letting me know if there is still an issue or not?
Thanks Honza, I tried a manual update, not available here yet.
Just got the VPS update.

Edit: Seems the problem is fixed.
« Last Edit: February 22, 2017, 10:34:38 AM by Asyn »
Win 8.1 [x64] - Avast PremSec 20.7.2421.B#1 [UI.544] - CC 5.68 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline amelie7

  • Newbie
  • *
  • Posts: 1
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #106 on: February 22, 2017, 10:23:27 AM »
How do you stop files from being deleted on reboot? is it safe to simply uninstall avast?

Offline FrostBird

  • Newbie
  • *
  • Posts: 6
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #107 on: February 22, 2017, 10:25:28 AM »
I have the same problem, twice every day avast scans (full system) my laptop, a few hours later, it said I had no malware, then I got a report saying this.

Offline lohikaarmetuhon

  • Newbie
  • *
  • Posts: 1
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #108 on: February 22, 2017, 10:25:55 AM »
I have the same issue,, appear me in Google, something about a TCP and something in Cortana folder, but is the same alert

Offline klyde_13

  • Newbie
  • *
  • Posts: 3
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #109 on: February 22, 2017, 10:29:45 AM »
Avast! By the time I got a detection I ran a boot time scan! After the scan it shows that I have over 4878 FILES INFECTED!!!

4673 OF THOSE FILES ARE PERSONAL PICTURES FROM LAST YEAR WHICH I HAVE NO BACK UP!!!

IT GOT PERMANENTLY DELETED BY AVAST!!!

Offline catinahat

  • Jr. Member
  • **
  • Posts: 52
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #110 on: February 22, 2017, 10:32:32 AM »
On the positive side I've just got the new VPS and my latest quick scan is clean. :)
Thanks for confirmation!

You're welcome. Thanks for releasing the fix. For some reason my reply to another of your comments didn't go through. I would like to suggest that Avast test it's VPS definitions before releasing them. I understand that you cannot prevent all FPs with all the software out there, however many of my detections in my quick scan were for windows files & other OS files. I find this inexcusable. I hope this incident will cause you to change your processes.

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1130
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #111 on: February 22, 2017, 10:33:37 AM »
I really dont know what to do here. I'm worried about putting things in the chest if theyre important files which a lot of them seem to be.
But it doesnt seem to want to let me do nothing and it's been like this for a few hours.
Clicking "Close" doesn't work?

Offline scorpiosan

  • Newbie
  • *
  • Posts: 3
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #112 on: February 22, 2017, 10:34:17 AM »


Offline Nate123

  • Newbie
  • *
  • Posts: 16
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #113 on: February 22, 2017, 10:38:40 AM »
After you restore items from the virus chest do they continue to show up in there?

I tried to restore all 3k-ish files and used overwrite all, windows 10 asked me if i wanted to let avast makes changes to my system, i said yes.

All files are still showing as being in virus chest.

I am updated to 170222, did a full system scan, no issues were found.

Except now when I try to open certain programs i get an error. I double click on an .exe and get Windows cannot find 'C:\blahblahblah\thing.exe'. Make sure you typed the name correctly and then try again. Wonder how unstable my OS is now that avast nuked a massive number of my files...

Offline NunoCaetano

  • Newbie
  • *
  • Posts: 5
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #114 on: February 22, 2017, 10:42:43 AM »
A false detection of windows files? Come on now... This was a horrible mistake.

Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #115 on: February 22, 2017, 10:44:05 AM »
Avast! By the time I got a detection I ran a boot time scan! After the scan it shows that I have over 4878 FILES INFECTED!!!

4673 OF THOSE FILES ARE PERSONAL PICTURES FROM LAST YEAR WHICH I HAVE NO BACK UP!!!

IT GOT PERMANENTLY DELETED BY AVAST!!!

Sounds like my situation.

Offline Samsonite64

  • Newbie
  • *
  • Posts: 6
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #116 on: February 22, 2017, 10:45:49 AM »
I managed to manually restore a whole bunch of files that were sent to my chest, then did a system restore. However, I ran a boot-time scan prior to finding out about this false positive. I hit ESC and cancelled the scan pretty early because I noticed something was obviously wrong with all the infected files it was finding (it discovered so many false positives that it was ineligible to read what was happening on my screen); but not before it showed me the 1000+ files it labeled as "infected". I didn't do anything when the files were shown to be infected and I just let computer restart itself. I was wondering whether or not the scan automatically deleted those files or just left them how they were when I hit ESC?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31345
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #117 on: February 22, 2017, 10:49:34 AM »
Well, there is a very good reason why someone came up with the idea to backup things a long time ago. ;)

And it is not just for cases like this.
Hard-drive can fail, house (and system) can burn down, you can make a mistake and delete files etc.

One could try Photorec and see if the files can be recovered if there is no backup.

Offline Caso

  • Newbie
  • *
  • Posts: 9
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #118 on: February 22, 2017, 10:53:32 AM »
Well, there is a very good reason why someone came up with the idea to backup things a long time ago. ;)

 Photorec and see if the files can be recovered if there is no backup.

Still won't save you from severe OS problems or a full image re-install.

Offline Nate123

  • Newbie
  • *
  • Posts: 16
Re: [VBS: Malware Gen] False positives Vir. def: 170221-1 22.2.2017 0:08:41
« Reply #119 on: February 22, 2017, 10:56:44 AM »
Well, there is a very good reason why someone came up with the idea to backup things a long time ago. ;)

And it is not just for cases like this.
Hard-drive can fail, house (and system) can burn down, you can make a mistake and delete files etc.

One could try Photorec and see if the files can be recovered if there is no backup.

I tried to do a system restore. It failed due to a registry error. Not sure if due to the thousands of files avast deleted or not.