Author Topic: False Positive  (Read 7869 times)

0 Members and 1 Guest are viewing this topic.

ianb

  • Guest
False Positive
« on: October 20, 2004, 10:48:46 PM »
Strange.  I've used Avast and been testing other AVs and never seen this detected before.  Tonight I had an Avast update and this was detected as a trojan.  False Positive ?

I have sent the file to Avast.


Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:False Positive
« Reply #1 on: October 20, 2004, 11:03:51 PM »
Is it with VPS version 0443-0 or 0443-1? If 0443-0, please update to 0443-1 and retry. Thanks.
If at first you don't succeed, then skydiving's not for you.

c0Ld

  • Guest
Re:False Positive
« Reply #2 on: October 21, 2004, 03:32:07 AM »
I just got this too with the newest update.
It detected clonecd as a trojan :/
« Last Edit: October 21, 2004, 03:34:54 AM by c0Ld »

bountyhunter1.0

  • Guest
Re:False Positive
« Reply #3 on: October 21, 2004, 04:32:11 AM »
What is the CloneCD.exe file? is that an avast executable or something?


c0Ld

  • Guest
Re:False Positive
« Reply #4 on: October 21, 2004, 05:19:47 AM »
CD burning software.
Update: it also called the Avast External Controller a trojan.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:False Positive
« Reply #5 on: October 21, 2004, 09:37:06 AM »
Does it still happen with 0443-1 VPS?

ianb

  • Guest
Re:False Positive
« Reply #6 on: October 21, 2004, 10:45:25 AM »
Im at work at the moment Igor but will let you know later if it still happens with with 0443-1 VPS.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:False Positive
« Reply #7 on: October 21, 2004, 01:57:10 PM »
My programs were fixed yesterday at 8 PM i think. Thanks for fast fix :)
Visit my webpage Angry Sheep Blog

laf58

  • Guest
Re:False Positive
« Reply #8 on: October 21, 2004, 06:08:04 PM »
That happened to me too with 0443-1 VPS. OS win XP Pro, SP2.

ianb

  • Guest
Re:False Positive
« Reply #9 on: October 21, 2004, 06:15:34 PM »
All fine now with 0443-2 VPS.

Also thanks for the quick email response from Avast.  Great service.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48541
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:False Positive
« Reply #10 on: October 21, 2004, 09:32:05 PM »
I'm, getting a warning on a program called:
C:\Program Files\Evrsoft\1st Page 2000\IScripts\Buttons\Six Buttons from hell.izs
Which checks out clean at Jotti and also braught up no warnings when the instalation program was checked by ashQuick. This is part of
 Evrsoft 1st Page 20000. I sent it in to Alwil yesterday but am still waiting for an answer. :'(
Any help would be greatly appreciated. Thanks :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48541
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:False Positive
« Reply #11 on: October 22, 2004, 01:08:39 AM »
I believe I've found my own answer.
Alert: "Six Buttons From Hell"
The 1st Page software includes various JavaScript examples, including a "practical joke" called Six Buttons From Hell. Some virus scanning software will identify this script as the js/winbomb trojan. YoHost recommends deleting this file after you install 1st Page (or skipping the file during installation). Deleting this file will not affect the operation of the program. More information is here.
The file is typically installed as: C:\Program Files\Evrsoft\1st Page 2000\IScripts\Buttons\Six buttons from hell.izs
YoHost believes the 1st Page developers made a bad choice by including the "Six Button" example, but we have no connection with the developers.


I'll save an additional post and thank myself for being so helpful. ;D ;D ;D
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

RJARRRPCGP

  • Guest
Re:False Positive
« Reply #12 on: October 22, 2004, 02:17:23 AM »
Huh? The only time I have gotten false alarms was when heuristics was enabled. Is heuristics enabled?

Heuristics is automatically enabled when the protection level is set to high, AFAIK.
« Last Edit: October 22, 2004, 02:18:43 AM by RJARRRPCGP »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48541
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:False Positive
« Reply #13 on: October 22, 2004, 02:37:44 AM »
Huh? The only time I have gotten false alarms was when heuristics was enabled. Is heuristics enabled?

Heuristics is automatically enabled when the protection level is set to high, AFAIK.
RJARRRPCGP
Heuristics is only used in e-mail scans and is NOT available in the Home version.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:False Positive
« Reply #14 on: October 22, 2004, 03:06:54 AM »
Heuristics is only used in e-mail scans

Fully right!

and is NOT available in the Home version.

Wrong  :P
Both Home and Professional have the Heuristic module for emails  ;)
The best things in life are free.