Author Topic: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]  (Read 7891 times)

0 Members and 1 Guest are viewing this topic.

yankanuk

  • Guest
Hi, had some problems with my scanner so I downloaded a driver from the website. Avast said it found the above virus and to abort the connection.
So I tried re-installing with my CD that came with the scanner....same viris pop-up. So I deceided to scan the CD only, same pop-up....what gives? I've had the scanner installed for 4 yrs now?
Thanks,

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #1 on: February 02, 2008, 09:51:07 PM »
It may be that a newly added signature happens to match a string on the file.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.

Or you can send it from the chest (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

yankanuk

  • Guest
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #2 on: February 02, 2008, 11:55:00 PM »
I submitted the file off my CD to VirusTotal and the only AV that picks it up is Avast....called Win32:Bmcentral-B
Now what?
« Last Edit: February 03, 2008, 12:15:37 AM by yankanuk »

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #3 on: February 03, 2008, 12:22:19 AM »
Send the sample to avast as I mentioned in my reply and exclude the file from scans in the meantime.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

yankanuk

  • Guest
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #4 on: February 03, 2008, 07:09:52 AM »
I can't send a sample to Avast because I can't zip the file from the CD.
I'm getting really confused on this!

CharleyO

  • Guest
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #5 on: February 03, 2008, 08:10:40 AM »
***

Did you not download this driver into your computer?    ???

Zip that driver, if it is the problen file, and send it to avast as David mentioned.


***

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #6 on: February 03, 2008, 01:36:16 PM »
I can't send a sample to Avast because I can't zip the file from the CD.
I'm getting really confused on this!


Send the file from the avast chest.
You can add the file to the User Files (File, Add) section of the avast chest where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.


Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

yankanuk

  • Guest
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #7 on: February 03, 2008, 04:41:29 PM »
Thanks for all the replies. I finally turned off avast, copied the file to my desktop, zipped it and sent it to avast with the link to this post. I haven't heard back yet. Of course I turned avast back on after that and also did a bootscan and there was nothing found.

The funny thing is....the scanner is still installed (because I didn't up-date the driver as it kept saying virus) and there is nothing found in my bootscan and thorough scan.....go figure.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #8 on: February 03, 2008, 06:33:14 PM »
A boot scan wouldn't find anything, if the infected file is on a CD.

Alwil normally don't reply unless they need more information, though they are usually quite quick at rectifying false positive detections.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

misskitty

  • Guest
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #9 on: February 14, 2008, 08:27:43 PM »
Well I guess Avast doesn't want to be bothered with this problem

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: 8920.exe for onetouch 8920 USB scanner says win32:Bmcentral [trj]
« Reply #10 on: February 15, 2008, 05:03:01 PM »
If you read the last reply of yankanuk and did a little reading between the lines, not to mention the complete thread, this was a suspect false positive as confirmed by the VirusTotal results.

<snip>
The funny thing is....the scanner is still installed (because I didn't up-date the driver as it kept saying virus) and there is nothing found in my bootscan and thorough scan.....go figure.

This basically that this FP was corrected very shortly after it was reported, so your comment "Well I guess Avast doesn't want to be bothered with this problem" is well wide of the truth.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security