Author Topic: ¿False Positive in SuperAntispyware v4.25.1012?  (Read 10226 times)

0 Members and 1 Guest are viewing this topic.

cazoza

  • Guest
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #15 on: February 01, 2009, 08:32:24 PM »
Well, thanks, i have tried safe mode scan, and my system is clean, and altough is sayin the memory scan that is infected, again with win32:AutoRun-AKO. I have tried Avast PRO Full Scan, Malwarebytes Full Scan, SAS PRO Full Scan, Outpost 2009 Pro Full Scan, also an Avast Bart CD 2.0 Trough Scan, and nothing. All scans says, no infection found.

Thanks for your help.

I'll wait for a SAS Update, so i can see if it corrects the problem.

I attached my hijack this log. Hope it can help.
« Last Edit: February 01, 2009, 08:50:01 PM by cazoza »

micky77

  • Guest
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #16 on: February 01, 2009, 08:49:38 PM »
If your convinced its SAS, could you not use the option not to start SAS when windows starts( preferences ),then try a memory scan.
I was playing with a  program today called Hijack free, its like process explorer.It has a search function.I doubt very much it would be of any use,and it has limitations with vista 64.

http://www.hijackfree.com/en/


Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11822
    • AVAST Software
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #17 on: February 02, 2009, 10:19:52 AM »
I'd say you have a conflict of two anti-malware solutions here.
avast! is simply detecting unpacked/uncrypted virus signatures in SAS memory.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87258
  • No support PMs thanks
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #18 on: February 02, 2009, 03:37:58 PM »
Why then do I not see this as I also have SAS Pro ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.12.6044 (build 22.12.7758.768) UI 1.0.741/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11822
    • AVAST Software
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #19 on: February 02, 2009, 08:05:15 PM »
Honestly, don't know, might be something option-specific.
Btw, the "process IDs", as shown by avast!, are in hexadecimal format - while Task Manager shows them in decimal format, so you have to convert the values before matching them.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87258
  • No support PMs thanks
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #20 on: February 02, 2009, 09:54:06 PM »
Any tools to do the conversion you know of at the top of your head ?

What might also help is that generally I always pause the standard shield before I run a scan with any other security application, so I don't know if this would help the original poster.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.12.6044 (build 22.12.7758.768) UI 1.0.741/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

YoKenny

  • Guest
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #21 on: February 03, 2009, 01:06:55 AM »
Any tools to do the conversion you know of at the top of your head ?

The following utility will enable you to convert hexadecimal to decimal and vice versa
http://www.statman.info/conversions/hexadecimal.html
http://www.easycalculation.com/hex-converter.php

Google is your friend.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87258
  • No support PMs thanks
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #22 on: February 03, 2009, 01:21:13 AM »
Thanks.
He He, depends if Google isn't blocking all sites as bad ;D
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.12.6044 (build 22.12.7758.768) UI 1.0.741/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

cazoza

  • Guest
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #23 on: February 03, 2009, 06:13:35 AM »
I will try to pause the standard shield. But as a comment, i have tried Avast Bart CD v3 beta, and also it didnt find infections. So i dont know what else to do. Well, i think my system is clean, For now. Thanks.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87258
  • No support PMs thanks
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #24 on: February 03, 2009, 03:54:05 PM »
You're welcome, I always recommend pausing the standard shield when running other on-demand security scan, as it does reduce the possibility of any clash (possibly in this case the loading of signature files into memory). Another consideration it would also reduce overall scan duration as there isn't a lot of duplicate scanning going on as avast would also scan files that SAS wanted to open to scan.

Let us know if pausing the standard shield resolves this problem before you run and SAS scan.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.12.6044 (build 22.12.7758.768) UI 1.0.741/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

cazoza

  • Guest
Re: ¿False Positive in SuperAntispyware v4.25.1012?
« Reply #25 on: February 03, 2009, 05:58:01 PM »
I have tried pausing the standard shield, and it is the same. No infections found. Well. I think there is nothing to do. I have tried everything you said to me, and, the Autorun-OKA, is still in my PC. Thank you for all your help! This is an awesome Forum! Keep up the good work!

P.S. The Bart CD v3 Beta is awesome! It has improved scan speed.