Author Topic: Avast confuses a software with a virus - what should I do?  (Read 3624 times)

0 Members and 1 Guest are viewing this topic.

Offline mrsparrow

  • Newbie
  • *
  • Posts: 2
Avast confuses a software with a virus - what should I do?
« on: July 27, 2010, 11:49:59 AM »
Hi,

I recently installed a new software on my computer but immediately after installation Avast moves the .exe file of that software into the virus chest.
Thus I am unable to run the software and I really need it!

I tried to exclude the whole folder from being scanned by Avast, but even so, immediately after I place the .exe file in there it still gets removed.

Can anybody help me out with a viable solution?

Thanks!

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11808
    • AVAST Software
Re: Avast confuses a software with a virus - what should I do?
« Reply #1 on: July 27, 2010, 12:04:29 PM »
Well, first you could tell us what software is that and what virus avast! reports there...

Offline mrsparrow

  • Newbie
  • *
  • Posts: 2
Re: Avast confuses a software with a virus - what should I do?
« Reply #2 on: July 27, 2010, 12:13:03 PM »
The software is called SENuke and it's for SEO purposes. And Avast detects it as being a Win32:VBMod [Trj]

How come if I exclude the whole folder from scanning, Avast will still find and remove the .exe file?


Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 85959
  • No support PMs thanks
Re: Avast confuses a software with a virus - what should I do?
« Reply #3 on: July 27, 2010, 04:51:03 PM »
Because I believe you are excluding it from on-demand scans, avast Settings, Exclusions and it is being detected by the File System Shield, Expert settings, Exclusions.

Excluding the whole folder is leaving a hole in your security, you should change the \* at the end of the path to \file_name.exe of the executable file.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\*
That will stop the File System Shield scanning any file you put in that folder.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.9.2494 (build 21.9.6698.703) UI 1.0.672/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security