Author Topic: Avast 4.7.1043 and IceSword f/p?  (Read 3298 times)

0 Members and 1 Guest are viewing this topic.

Timo Schmidt

  • Guest
Avast 4.7.1043 and IceSword f/p?
« on: September 08, 2007, 06:25:58 PM »
According to the latest Build IceSword.exe seems to be a trojan. Is this a false/positive?

Win32:Stealth-H[Trj]

I sent the example of IceSword.exe to your labs (via VirusChest).


Greetings

Timo

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89102
  • No support PMs thanks
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #1 on: September 08, 2007, 07:19:19 PM »
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 30 different scanners.
Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can't do this with the file in the chest, you will need to move it out.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced, Add and Program Settings, Exclusions) and Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

the Tester

  • Guest
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #2 on: September 08, 2007, 08:38:27 PM »
What version of Ice Sword are you using?
I have Ice Sword 1.22 English beta 3.
I right-click scanned every related folder and the program itself and it appears clean with Avast.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #3 on: September 09, 2007, 12:18:29 AM »
Also, are you using the last 000773-3 VPS file?
The best things in life are free.

Timo Schmidt

  • Guest
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #4 on: September 09, 2007, 12:54:15 AM »
IceSword 1.20

VirusTotal showed only Avast which detected this "virus". Panda marked it as "suspicious file". All other suites (even Kaspersky or Antivir) didn't show a virus.

I think I should upgrade this programm to 1.22 ;)



Greetings

Timo

swico

  • Guest
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #5 on: September 09, 2007, 12:01:33 PM »
IceSword 1.20
Yes, it is just a FP.
Recommend that u switch to 1.22

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #6 on: September 09, 2007, 09:36:18 PM »
Yes, it is just a FP.
Please, follow David's advices and help avast to correct this detection.
Before doing anything, try to update the virus database and see if it still detected as being infected.
The best things in life are free.

Timo Schmidt

  • Guest
Re: Avast 4.7.1043 and IceSword f/p?
« Reply #7 on: September 10, 2007, 01:02:21 AM »
Updated to 1.22 and everything is fine now :)

The VPS Update from yesterday didn't fix the problem with 1.20 though. I recommend you use IceSword 1.20 if you want to fix this f/p ;)