Author Topic: Help! False Postive  (Read 3431 times)

0 Members and 1 Guest are viewing this topic.

chetola

  • Guest
Help! False Postive
« on: July 12, 2007, 12:49:27 AM »
I will try to make this short and concise.
This morning Avast found the following Virus:
Tbcpro.exe
Win 32: Agent-IYW [ trj]
The virus was cleaned.

Now my Title Pro Clock[Tbcpro.exe] does not work. it has been working together with Avast for over a year until this morning.

I wrote, tbcpro@quickersoft.com and they advised to use their uninstall utility and install again from their site, which I did. Half way through the download Avast notified me of the same Virus.

Title Pro software has been around a long time and the distributor says I have a false positive.
Please advise what I do now to make both programs work properly.

Thanks in Advance,
David

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Help! False Postive
« Reply #1 on: July 12, 2007, 01:47:40 AM »
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 30 different scanners.
Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can't do this with the file in the chest, you will need to move it out.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced, Add and Program Settings, Exclusions) and Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Send the sample to virus@avast.com zipped and password protected with password in email body and false positive in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

chetola

  • Guest
Re: Help! False Postive
« Reply #2 on: July 12, 2007, 01:55:37 AM »
DavidR,

I thank you so much for taking the time to answer. I will try your suggestions.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Help! False Postive
« Reply #3 on: July 12, 2007, 02:13:26 AM »
No problem, welcome to the forums.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

chetola

  • Guest
Re: Help! False Postive
« Reply #4 on: July 12, 2007, 02:58:08 AM »
Fixed

Just an update:

Avast just automatically updated. When it did so I scanned the virus in the chest and it was clean.

I downloaded Title Pro software again and this time no sign of a virus.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Help! False Postive
« Reply #5 on: July 12, 2007, 03:07:29 AM »
Avast just automatically updated. When it did so I scanned the virus in the chest and it was clean.
The very usual sign of a false positive...
Welcome to avast forums.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Help! False Postive
« Reply #6 on: July 12, 2007, 04:31:47 AM »
Just an update:
Avast just automatically updated. When it did so I scanned the virus in the chest and it was clean.

Looks like the FP has been very quickly corrected, thanks for the feedback.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security