Avast! Free blocking EasyAntiCheat.

Avast Free Antivirus / Premium Security
1

Hello Avast!

I have been playing Counter-Strike 1.6 on the Anti-Cheat program EasyAntiCheat (www.easyanticheat.net).

There seems to be some problem, since Avast! is blocking out EAC, on the most of the servers (Didn’t check all of them).
How can I fix this issue? Been trying to find some way to exclude the program, but seem to can’t unless turning off the virus program.

Thanks in advance.
ENCOUVERLOLZ.

2

Are you running avast 4.8 or 5?

In 4.8, you right-click the avast icon that is running in your system tray and click Program Settings.

Click the Exclusions button on the left, and type the folder name of what you are trying to exclude.

For example: C:\Program Files\EasyAntiCheat\

I would put an asterisk at the end of that too.

C:\Program Files\EasyAntiCheat*

Do you have any proof that avast is blocking it though? Are there any warnings in the log?

3

As has been suggested, avast doesn’t block, but scans and alerts to infection, do you mean avast is alerting on the file ?

If so exclusion is a very short term measure and you should submit the file for analysis and virus signature correction as required. Excluding the whole easyanticheat folder isn’t advised, you can subsequently edit the entry so it has the path only to the executable.

We need to know what version of avast you are using to give more detailed information ?

4

Hello there.

I’m using the free version (V. 5.0.418). Blocking and blocking, I wont say. There is some trojan in EAC, that I think I said yes to block - Sadly, since it doesn’t do anything. Which one I don’t know, cause I’m just the guy that is instant pressing it.

EasyAntiCheat aint a program like that. You can only run it from a .exe, It aint installed like that on the computer, which leads me to I can’t Exclude it from Avast!

So. What do I do? :z

5

First confirm the detection is good or not:
Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

  • Create a folder using windows explorer called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect* That will stop the File System Shield scanning any file you put in that folder. Now enter the chest again and Extract the file to the Suspect folder and upload it to VT.

If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.

  • In the meantime (if you accept the risk), add it to the exclusions lists:
    File System Shield, Expert Settings, Exclusions, Add and
    avast Settings, Exclusions
    Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.