avast! 4.7 home False positive

Good morning forum :wink:

I have a problem since last few updates.
The dll of application Foxtool ( http://www.jakewalk.de/meine-software/foxtool/ ), tool for foxmail emali client http://fox.foxmail.com.cn/ are reported infected

See image

http://img371.imageshack.us/img371/7527/avaster8.jpg

but not infected file (i have re-installed the application after the new download)

TIA

…Sorry for my bad english ::slight_smile:

Please submit the file in question to virus@avast.com

Thanks
Vlk

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.

If it is indeed a false positive, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already in the chest) where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.

http://www.virustotal.com/it/analisis/5ec7bd330d99707cd2fbb8808c4de6d2

This is the report of FOXTOOL.DLL

I have sended file normally, now re-send zipped file with password
If required, send Foxtool installer (downloadable from author site)
http://www.jakewalk.de/meine-software/foxtool/langswitch_lang/en/

Thanx for help me :wink:

Thank you for detail description. False positive alert will be fixed in next VPS update (080325-0)

Thank you very very much :wink:

GREAT, GREAT, GREAT, now is ok
http://www.plcforum.info/public/upload2/FrancescoC/img/hands35.gif

Another thank you very very much

Bye bye
http://www.plcforum.info/public/upload2/FrancescoC/img/hands2.gif

Cesco