Author Topic: Endpoint Protection Pro Plus Deleted a Safe PNG Image  (Read 2218 times)

0 Members and 1 Guest are viewing this topic.

Offline KDibble

  • Full Member
  • ***
  • Posts: 171
Endpoint Protection Pro Plus Deleted a Safe PNG Image
« on: April 22, 2020, 04:39:34 PM »
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...) on Windows 7 machines. Anyway...

Yesterday I ran a full scan of a Win 7 Ultimate machine (including delete content inside archives). It deleted a mere PICTURE (a PNG screen shot) of a Microsoft Word "enable this content" screen from inside of a PowerPoint presentation. It also deleted the actual PNG file that I had used for the presentation. Fortunately I have a copy of the PowerPoint elsewhere. If I want the actual PNG I can just take a screenshot of that. And then what, will avast! delete that PNG?

It's an IT Security training presentation. Of COURSE it's going to contain pictures of dangerous stuff. I mean, come on guys, really??

Yes, I'll file a false positive report.

Offline KDibble

  • Full Member
  • ***
  • Posts: 171
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #1 on: April 22, 2020, 05:08:00 PM »
I uploaded the original PowerPoint File to VirusTotal. The only engines that had a problem were Avast and Avast-owned AVG:

https://www.virustotal.com/gui/file/d15a8def4f35f098d11750c55e853491eb6a8867ca8d864829302eb8feee5eff/detection

However, the VirusTotal details don't appear to provide any justification for these findings. It's probably a brain-dead heuristic instead of an actual detection of dangerous code.

I filed a false positive report.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 43906
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #2 on: April 22, 2020, 05:44:30 PM »

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline KDibble

  • Full Member
  • ***
  • Posts: 171
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #3 on: April 22, 2020, 06:16:36 PM »
Yes. as I said (twice), I reported the false positive.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 43906
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #4 on: April 22, 2020, 06:28:15 PM »
I've reported it to Avast. Let's see if that helps.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline KDibble

  • Full Member
  • ***
  • Posts: 171
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #5 on: April 22, 2020, 07:57:21 PM »
I've reported it to Avast. Let's see if that helps.

Thank you.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66125
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #6 on: April 23, 2020, 06:00:07 AM »
I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm.. seems kinda old...)
Read here: https://forum.avast.com/index.php?topic=233272.0
Win 8.1 [x64] - Avast PremSec 20.7.2422.B#2 [UI.547] - CC 5.70 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline KDibble

  • Full Member
  • ***
  • Posts: 171
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #7 on: April 23, 2020, 04:22:28 PM »
Thank you. First, I've been notified by email that this false positive has been removed.

As to the thread about the end of support for that version referenced by Asyn, I've posted a response in that discussion. I will only repeat here that Avast should directly notify its paying customers, in advance, by email, of events like this rather than requiring us to constantly monitor a website that is largely manned by volunteers to find out about such important news. No, the resellers cannot be relied upon to do this. The only time my reseller talks to me is when they want me to buy another subscription.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66125
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Endpoint Protection Pro Plus Deleted a Safe PNG Image
« Reply #8 on: April 24, 2020, 06:02:52 AM »
You're welcome.
Win 8.1 [x64] - Avast PremSec 20.7.2422.B#2 [UI.547] - CC 5.70 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0