Author Topic: its False Alarm ?  (Read 2622 times)

0 Members and 1 Guest are viewing this topic.

24ayar

  • Guest
its False Alarm ?
« on: March 03, 2007, 11:40:16 PM »
Win32:Agent-FAI [Trj]
http://www.24ayar.net/metatraffic/track.asp?mtr=../CC50Demo.rar

STATUS: FINISHEDComplete scanning result of "CC50ClientSetup.exe", received in VirusTotal at 03.03.2007, 23:52:53 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.38 03.02.2007  no virus found
Authentium 4.93.8 03.02.2007  no virus found
Avast 4.7.936.0 03.03.2007 Win32:Agent-FAI
AVG 7.5.0.447 03.03.2007  no virus found
BitDefender 7.2 03.03.2007  no virus found
CAT-QuickHeal 9.00 03.02.2007  no virus found
ClamAV devel-20060426 03.03.2007  no virus found
DrWeb 4.33 03.03.2007  no virus found
eSafe 7.0.14.0 02.28.2007  no virus found
eTrust-Vet 30.6.3449 03.03.2007  no virus found
Ewido 4.0 03.03.2007  no virus found
FileAdvisor 1 03.04.2007  no virus found
Fortinet 2.85.0.0 03.03.2007  no virus found
F-Prot 4.3.1.45 03.03.2007  no virus found
F-Secure 6.70.13030.0 03.03.2007  no virus found
Ikarus T3.1.1.3 03.03.2007  no virus found
Kaspersky 4.0.2.24 03.03.2007  no virus found
McAfee 4975 03.02.2007  no virus found
Microsoft 1.2204 03.03.2007  no virus found
NOD32v2 2093 03.03.2007  no virus found
Norman 5.80.02 03.02.2007  no virus found
Panda 9.0.0.4 03.03.2007  no virus found
Prevx1 V2 03.04.2007  no virus found
Sophos 4.14.0 03.03.2007  no virus found
Sunbelt 2.2.907.0 03.01.2007  no virus found
Symantec 10 03.03.2007  no virus found
TheHacker 6.1.6.067 03.01.2007  no virus found
UNA 1.83 03.02.2007  no virus found
« Last Edit: March 04, 2007, 12:01:22 AM by 24ayar »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: its False Alarm ?
« Reply #1 on: March 03, 2007, 11:56:32 PM »
To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be carefull, you should 'exclude' that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file -  there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
The best things in life are free.