Author Topic: Endpoint Protection Pro Plus Deleted a Safe PNG Image  (Read 21492 times)

0 Members and 1 Guest are viewing this topic.

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Endpoint Protection Pro Plus Deleted a Safe PNG Image
« on: April 22, 2020, 04:39:34 PM »
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...) on Windows 7 machines. Anyway...

Yesterday I ran a full scan of a Win 7 Ultimate machine (including delete content inside archives). It deleted a mere PICTURE (a PNG screen shot) of a Microsoft Word "enable this content" screen from inside of a PowerPoint presentation. It also deleted the actual PNG file that I had used for the presentation. Fortunately I have a copy of the PowerPoint elsewhere. If I want the actual PNG I can just take a screenshot of that. And then what, will avast! delete that PNG?

It's an IT Security training presentation. Of COURSE it's going to contain pictures of dangerous stuff. I mean, come on guys, really??

Yes, I'll file a false positive report.

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #1 on: April 22, 2020, 05:08:00 PM »
I uploaded the original PowerPoint File to VirusTotal. The only engines that had a problem were Avast and Avast-owned AVG:

https://www.virustotal.com/gui/file/d15a8def4f35f098d11750c55e853491eb6a8867ca8d864829302eb8feee5eff/detection

However, the VirusTotal details don't appear to provide any justification for these findings. It's probably a brain-dead heuristic instead of an actual detection of dangerous code.

I filed a false positive report.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #2 on: April 22, 2020, 05:44:30 PM »

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #3 on: April 22, 2020, 06:16:36 PM »
Yes. as I said (twice), I reported the false positive.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #4 on: April 22, 2020, 06:28:15 PM »
I've reported it to Avast. Let's see if that helps.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #5 on: April 22, 2020, 07:57:21 PM »
I've reported it to Avast. Let's see if that helps.

Thank you.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #6 on: April 23, 2020, 06:00:07 AM »
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...)
Read here: https://forum.avast.com/index.php?topic=233272.0
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #7 on: April 23, 2020, 04:22:28 PM »
Thank you. First, I've been notified by email that this false positive has been removed.

As to the thread about the end of support for that version referenced by Asyn, I've posted a response in that discussion. I will only repeat here that Avast should directly notify its paying customers, in advance, by email, of events like this rather than requiring us to constantly monitor a website that is largely manned by volunteers to find out about such important news. No, the resellers cannot be relied upon to do this. The only time my reseller talks to me is when they want me to buy another subscription.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #8 on: April 24, 2020, 06:02:52 AM »
You're welcome.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0