Author Topic: [bugs?] help me test this, it may be a bug[solved]  (Read 3920 times)

0 Members and 1 Guest are viewing this topic.

gnwd

  • Guest
[bugs?] help me test this, it may be a bug[solved]
« on: June 22, 2006, 01:07:49 PM »
my platform
==========

** Avast home edition.
** windows 2000
** totalcmd
** a virus avast can recognise -- I have put the virus I used in
Code: [Select]
http://hsiang.liu.googlepages.com/200648124359805.rar. Indeed, it is not a vius. It's only a passwd revealer. many antivus product would not consider it as a virus. you can test it on www.virustotal.com.

Description
========
Avast does't block the copy action when I copy the infected .exe file from the archive 200648124359805.rar in totalcmd ( explorer will be the same too, I believe). No matter whatever action you selected when avast prompts you.
This situation will only happen after my windows 2000 OS wakes up from hibernation.

PS:
===
on My another windows XP system, avast behaves normally and does not present the problem mentioned above.

Solution
======
I have removed avast using the official remove utility:aswclear.exe and reinstalled it. Things seem go well now.
« Last Edit: June 23, 2006, 12:37:13 PM by gnwd »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: [bugs?] help me test this, it may be a bug
« Reply #1 on: June 22, 2006, 01:47:36 PM »
The .rar archive seems clean with Dr.Web.
But, please, do not post a 'live' link to a possible infected file here. Can't you edit the link?

avast does not block it but does avast detect it?
Which is your sensibility level? High or Normal on Standard Shield?
The best things in life are free.

gnwd

  • Guest
Re: [bugs?] help me test this, it may be a bug
« Reply #2 on: June 22, 2006, 03:39:09 PM »
avast detected it! and then avast prompted me to take a furthur action such as delete , move it into chest... but whatever actions i take, the pspv.exe was still copied to another place succefully from the archive file.

the keypoint is hibernation!! I have mentioned "This situation will only happen after my windows 2000 OS wakes up from hibernation."

the link file is a old version nirsoft's product. see http://www.nirsoft.net/utils/pspv.html. Anyhow, we should not run it. For test, we only need drag/copy it.

If you insist, I will remove the link here. but I hope it can be preserved for some days.

I keep avast default settings without touch. So, It should be standard shield.
« Last Edit: June 22, 2006, 05:05:03 PM by gnwd »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88899
  • No support PMs thanks
Re: [bugs?] help me test this, it may be a bug
« Reply #3 on: June 22, 2006, 04:11:36 PM »
You don't have to remove the link, that wasn't what Tech said, the key is 'Live link' you can break the link so it can't be accidentally clicked by the inexperienced or curious but able to be cut, pasted, edited and downloaded, or using the code tag which doesn't make it live/active, etc.
Code: [Select]
http://hsiang.liu.googlepages.com/200648124359805.rar
http : // hsiang.liu.googlepages.com/200648124359805.rar
Neither of which are active links but those who need to check will be able to cope. You could also have sent the file to virus @ avast.com

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

gnwd

  • Guest
Re: [bugs?] help me test this, it may be a bug
« Reply #4 on: June 22, 2006, 05:00:52 PM »
Thank you for your explanation about live link. I have modified it.

PS: I am not seeking a false virus report. Plz read my topic again.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88899
  • No support PMs thanks
Re: [bugs?] help me test this, it may be a bug
« Reply #5 on: June 22, 2006, 05:35:55 PM »
My mistake, I thought because of your reference to VirusTotal not detecting it as a virus this is what you were also concerned about.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security