Author Topic: Win32:Killfiles-D [Trj] false positive  (Read 3024 times)

0 Members and 1 Guest are viewing this topic.

jackspm

  • Guest
Win32:Killfiles-D [Trj] false positive
« on: May 11, 2006, 06:33:27 PM »
The new signature file 0619-2 is falsely detecting Win32:Killfiles-D [Trj] on a program which I wrote in visual basic.  Anyway to fix that?  It's annoying because I need to use that program a lot and Avast keeps popping up.  When I select "No Action", but the program would not run either.  I need to stop Avast in order to run that program.  Please help.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: Win32:Killfiles-D [Trj] false positive
« Reply #1 on: May 11, 2006, 08:27:25 PM »
You could also check/confirm the suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

jackspm

  • Guest
Re: Win32:Killfiles-D [Trj] false positive
« Reply #2 on: May 12, 2006, 12:41:50 AM »
I did the online scan and only Avast detected the virus.  I'm sure it is a false positive because I personally wrote the program in Microsoft Visual Basic 6.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Win32:Killfiles-D [Trj] false positive
« Reply #3 on: May 12, 2006, 12:51:48 AM »
I did the online scan and only Avast detected the virus.  I'm sure it is a false positive because I personally wrote the program in Microsoft Visual Basic 6.
It's really a false positive as far we can see.
As a workaround, you can use the Exclusion lists (for on-demand and on-access scanners).
Related thread: http://forum.avast.com/index.php?action=display;topic=21095.0

Link edited.
« Last Edit: May 12, 2006, 03:25:23 AM by Tech »
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: Win32:Killfiles-D [Trj] false positive
« Reply #4 on: May 12, 2006, 12:59:03 AM »
Tech your Related topic link should be  http://forum.avast.com/index.php?topic=21095.0 other wise it takes you to a reply/post (action=post;) for that thread.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security