Author Topic: Avast recently started blocking our application  (Read 3446 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast recently started blocking our application
« on: December 09, 2015, 10:50:10 AM »
We have an application that our clients would like to use for their daily work, but recently Avast (and other antivirus software) started doing some rather nasty things.

By which I mean silently taking files (we have a few .exe and a few .dll files that we need), or silently blocking the main exe from running at all.  Keyword here being: silently.

There's no pop-up that it had found a virus.  The files work fine with Avast disabled.  The files are detected to be clean when Avast is asked to check the directory.

How about telling us what the problem is instead of silently doing stuff?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31210
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast recently started blocking our application
« Reply #1 on: December 09, 2015, 11:12:01 AM »
What OS/SP ?
What exact version of avast ?
What VPS version ?
Any other security (related) software installed ?

Have a look in the log files to see if there is any information.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Avast recently started blocking our application
« Reply #2 on: December 09, 2015, 11:15:28 AM »
Upload and test your program here  www.virustotal.com   if tested before, click rescan for a fresh result
Post link to scan result here


REDACTED

  • Guest
Re: Avast recently started blocking our application
« Reply #3 on: December 09, 2015, 11:18:39 AM »
Upload and test your program here  www.virustotal.com   if tested before, click rescan for a fresh result
Post link to scan result here

https://www.virustotal.com/en/file/6cbbff668b7f7ba94c9d774342908dee7f961abf9a9b3d93262e66d5d8899ccf/analysis/1449656215/ seems all fine to me.

REDACTED

  • Guest
Re: Avast recently started blocking our application
« Reply #4 on: December 09, 2015, 11:22:27 AM »
What OS/SP ?
What exact version of avast ?
What VPS version ?
Any other security (related) software installed ?

Have a look in the log files to see if there is any information.

We'll look into this more precisely the next time we have access to the machine.  No idea about the avast client's version, but the virus definitions are the newest.  My coworker said it was win8 or win10.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37191
Re: Avast recently started blocking our application
« Reply #5 on: December 09, 2015, 11:31:56 AM »
submit a ticket here   https://support.avast.com/support/tickets/new

you may give link to this topic



REDACTED

  • Guest
Re: Avast recently started blocking our application
« Reply #6 on: December 10, 2015, 11:01:08 AM »
Thanks, submitted.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31210
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast recently started blocking our application
« Reply #7 on: December 10, 2015, 12:44:55 PM »
Please let us know if you have received word from avast.
The answer may help others.

REDACTED

  • Guest
Re: Avast recently started blocking our application
« Reply #8 on: December 14, 2015, 10:33:28 AM »
I have, we have yet to investigate a few more things though, so I cannot provide more detailed answer yet.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31210
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast recently started blocking our application
« Reply #9 on: December 14, 2015, 10:36:46 AM »
No need to rush with the risk overlooking things.
Take the time that is needed.

REDACTED

  • Guest
Re: Avast recently started blocking our application
« Reply #10 on: November 10, 2017, 12:03:45 PM »
Well, sorry to necro this topic and sorry for not checking back for a long time, but here it is.

Avast Support recommended upgrading to a newer version of Avast, and that of course didn't change anything.  In fact, the issue is still present with more recent builds of our software, with fresh and new installs of Avast (and various other common antivirus software).  As always, virustotal says it's perfectly clean: https://www.virustotal.com/en/file/f09b25555d8b37896fb692ff4b87faa5cd1cc91271de9902b1bb12253352db41/analysis/1510310305/

All the files we ship in this thing (it's an ActiveState self-hosting executable, no installer, it just extracts various dlls and shipped files and executables during run) are also virus-free (and still more often than it's comfortable, they either get silently blocked from running, or silently quarantined; or when run separately also get sent for analysis and blocked, even though they had been run before from within the main software).

Eg. https://www.virustotal.com/en/file/3f8bb63867ecf5f446cfefcf71a3d5db3fe604c32c0e99c1695336153dd9a75d/analysis/1510310847/

Adding the directory that holds the shipped files to the white list doesn't help with the default settings of Avast, and we can't expect all our users to mess around with the antivirus settings.

Avast Support recommended using some Uninstall Tool I had never heard about to uninstall the old Avast and then install a new one — that was kinda strange, but whatever.  Windows' built-in uninstall has always been sufficient.

I'm not sure what else we could do to not trigger heuristics simply due to our software not being used by millions of people.

----

On my test system (a Windows 7), here's the current versions of Avast:
* Avast: 17.7.2314 (Build 17.7.3660.244)
* Virus definitions: 171110-0
« Last Edit: November 10, 2017, 12:08:39 PM by phl82 »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76213
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast recently started blocking our application
« Reply #11 on: November 10, 2017, 12:10:40 PM »
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2264
Re: Avast recently started blocking our application
« Reply #12 on: November 10, 2017, 01:05:02 PM »

REDACTED

  • Guest

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76213
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast recently started blocking our application
« Reply #14 on: November 10, 2017, 01:46:29 PM »
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0