Author Topic: False positives?  (Read 4660 times)

0 Members and 1 Guest are viewing this topic.

Offline Justin_22

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 445
  • Free your soul and let it fly
False positives?
« on: December 03, 2009, 02:42:52 AM »
Yeah, I just started up my computer and as soon as windows was completely dont logging on a few of my programs got completely nuked one such program is spyware terminator
the list includes
Guitar Pro 5
Artifacts Live!
Paradise Chat
and the Hp recovery wizard.exe for this computer

any ideas here?

Avast!  2014 beta - Sandboxie - K9 Web Protection

Offline Carolc

  • Newbie
  • *
  • Posts: 1
Re: False positives?
« Reply #1 on: December 03, 2009, 08:52:42 AM »
 If this help anyone, it was a suggestion and I did it and all is peaceful once again. :)

ITS A FALSE POSITIVE.. NOT A VIRUS.
in Avast!'s most recent update, (currently being downloaded by all Avast users all over the world) avast marked all programs written in with Delphi programming such as Skype, Spybot, online armor and others, as a virus.
Then Avast proceeds to remove all these programs, and mark them as viruses as you boot up your computer. This can cause a crippling effect on your system, as my dad learned earlier today.
The update was sent out earlier this morning and was most likely downloaded a couple hours ago by all avast users.
We thought that someone had downloaded WIN32: DELF-MZG (TRJ) and it was spreading over our other computers. Luckily I run a mac which there isnt a version of Avast for. My dad lost all his business files since a lot of them were programed in Delphi.

THE ONLY THING YOU CAN DO (Until Avast! fixes this error):
1. Turn off computer and reboot in safe mode by holding F8.
2. Log in as Admin,
3. REMOVE AVAST completely from computer, do not allow it to run anymore scans.
4. Get a new anti-virus until Avast teams fix this problem.

All i can say now is that shame on you Avast for crippling all 5 PCs in my house and causing ireplacable damage to files and directories.

i hope you can catch this b4 it does to your PCs what it did to mine.
Source(s):
My own

http://forum.avast.com/index.php?topic=51623.0
http://forum.avast.com/index.php?topic=51617.0
http://answers.yahoo.com/question/index?qid=20091202190206AAjOrYT
Source(s):
http://forum.avast.com/index.php?topic=51623.0
http://forum.avast.com/index.php?topic=51617.0
http://answers.yahoo.com/question/index?qid=20091202190206AAjOrYT
3 hours ago

Offline Chris Thomas

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1936
  • Christian Geek - aka 'born again' Geek
Re: False positives?
« Reply #2 on: December 03, 2009, 08:57:12 AM »
Win32:Delf-MZG false positive was fixed in the latest VPS - 091203-1

Offline kenf

  • Newbie
  • *
  • Posts: 11
Re: False positives?
« Reply #3 on: December 03, 2009, 10:40:49 AM »
Okay it was fixed and I updated to the latest update, but after restoring all those files I had moved to the chest, when I do an update, Avast needs to submit and then seems to download some of those files before the update can complete.
This takes and enormous amount of time now for a simple update.
Very frustrating and may push me to another anti-virus, which is a shame since this is the first problem I've had with Avast.
Should I uninstall and then reinstall Avast?
Anyone with this same problem or any advise?
Thanks,
kenf

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11664
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: False positives?
« Reply #4 on: December 03, 2009, 11:18:35 AM »
You can manually remove the files prepared for submission (the FPs).
Turn off avast self defense (avast settings -> Troubleshooting page) , go to the folder

C:\program files\alwil software\avast4\data\spool\submit and delete the files from there.

Then re-enable the self defense and start the update again.


Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline kenf

  • Newbie
  • *
  • Posts: 11
Re: False positives?
« Reply #5 on: December 04, 2009, 04:10:54 AM »
Thanks for your help.
I just did a manual update and I had the latest version and it didn't submit or download any of those files,
But I have another question:  After the scan, which didn't find anything, there's a whole bunch of files, maybe a few that were in the chest and then restored, but many others with the message that they cannot be scanned.
Why is that and does that mean that Avast is only slightly effectiive?
Thanks for any help.
kenf.

Offline kenf

  • Newbie
  • *
  • Posts: 11
Re: False positives?
« Reply #6 on: December 04, 2009, 04:42:23 AM »
Dear Vlk,
I appreciate your efforts to help.
One more question: since this happened I haven't run CCleaner because I didn't want to remove anything important that might be needed.
If things seem to be working okay, do you think it's safe to use CCleaner?
ps. I'm sure you know of this program, but for others, it cleans up junk from your computer and I've found it to be very safe to use.  Also, I know you can't speak for another companies product, but any general help would be useful.
Thanks again.
kenf

Offline YoKenny

  • Serious Graphoman
  • **
  • Posts: 8784
Re: False positives?
« Reply #7 on: December 04, 2009, 06:45:24 AM »
@kenf

CCleaner is safe.
E5200 2.5GHZ, 4GB RAM, 320GB HD, Windows 7 Home Premium 64bit, avast! V9.0 Free, IE10
P4 2.8GHZ, 1.5GB RAM, 40GB HD, XP Pro SP3 32bit, avast! V9.0 Free, Google Chrome
with hpHosts, MVPS HOSTS files, SpeedFan, WinPatrol PLUS

Offline nightingaleron

  • Newbie
  • *
  • Posts: 19
Re: False positives?
« Reply #8 on: December 04, 2009, 08:05:07 AM »
Yeah, I just started up my computer and as soon as windows was completely dont logging on a few of my programs got completely nuked one such program is spyware terminator
the list includes
Guitar Pro 5
Artifacts Live!
Paradise Chat
and the Hp recovery wizard.exe for this computer

any ideas here?


I sent dozens of the false positive files to the virus chest and it did affect some programs but i did a system resore back to Wednesday and all is working fine again.