Author Topic: Steps to check for false positive?  (Read 2531 times)

0 Members and 2 Guests are viewing this topic.

cromag

  • Guest
Steps to check for false positive?
« on: April 15, 2010, 07:04:51 AM »
I'm running Avast 5, and updated it to Avast! 5.0.507 earlier today.  I ran a Full System scan this evening and Avast! reported a virus, which I have put in the Virus Chest.  However, I'm not sure that it's really a virus.  According to the info in the description in the chest, this file was last changed on 4/3/2003, which roughly corresponds to when I got the computer.  Meanwhile, another full scan, using the previous version of Avast!, didn't find anything -- and frankly, I haven't been using the computer for much in the meantime.

Is this something I should submit to the Virus Lab?

Thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89675
  • No support PMs thanks
Re: Steps to check for false positive?
« Reply #1 on: April 15, 2010, 04:23:14 PM »
What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\* That will stop the File System Shield scanning any file you put in that folder.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security