Hi, my son can’t play his OlloFair game anymore because Avast stops it from loading. How do I bypass this or could the CD be infected now? This is the store CD and you can’t write on it. I don’t know why this suddenly happened after 3 years. Latest VD and Program are updated…weird!
Most probably a false positive…
To know if a file is a false positive, please submit it to JOTTI and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used.
Jotti says only avast! finds it to be malware. I did send it to you last week but haven’t heard back… what do I do?
To them, not to me… I’m an user like you
Complain (like you’ve done) and wait a little.
You can add this particular file to the exclusions lists of avast.
Okay, thanks all! I found the exclusion list option and added the folder with the game in it. :))))
NO go with the Exclusion List fellahs. I DID find a work around though:
I have to PAUSE the Standard Shield to get the game going. This is not acceptable because I can’t just trust my kid to turn it back on after he’s finished playing the game and starts surfing, email comes in etc…
What in the world could I do now?
Which exclusions list did you find, there are two, one in the Program Settings, which is for on-demand scans and another in the Standard Shield, Customize, Advanced this is for the resident scanner which is what is required.
You shouldn’t need to exclude the folder, just the file that is detected as an FP.
Avast also finds this to be infected when I exclude autorun.exe
C:\Program Files\PlaidBanana\OlloFair\OlloFair.exe
Of course, when I Pause Standard Shield, it runs great…
Won’t the last VPS (0603-0) solve this?
If I were you, I won’t disable the Standard Shield protection… it would be safer, in my opinion, managing the exclusion list.
Well that is likely because having sucessuflly excluded autorun.exe, it then bumps into the next file in order of opening from autorun.exe.
What is the virus it detecting in this file?
Do the same check at Jotti you did before and also send to avast and exclude if a FP.
Okay, I did both exclusion lists and my VD is up to date but no go… I even tried excluding the whole game Folder in Programs. I’m stuck with Pausing the Standard Shield… awaiting email fix from support.
Win32:SdBot-3042 [Trj]
Trojan Horse
0603-0, 01/15/2006
For the Standard Shield provider (on-access scanning):
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button…
For the other providers (on-demmand scanning):
Right click the ‘a’ blue icon, click Program Settings.
Go to Exclusions tab and click on Add button…
Remember, the list is checked as text, I mean, C:\Program files is different of C:\PROGRA~1
The email response is not that fast as forums ;D
working on something!!!
GROOVY!!! 8) It works now, thank you!!!
I had to finally do ONLY this:
Left Click Standard Shield- Customize- Advanced- ADD
C:\Program Files\PlaidBanana\OlloFair\OlloFair.exe
Thanks again all! 8)
FYI fellahs:
Jotti’s online virus scan only shows AVAST! thinking it’s a virus, go figure!
Well, this is the exactly behavior of a false positive: a clean object that the antivirus thinks it is infected
Do you think the tech team will send a patch for this? It’s a bit annoying seeing the scrolling windows of the on access scanners go from time to time because I have selected Customize for one of them… No biggie but just wondering.
Does the last virus database correct your problem? 0603-0
The team always correct these problems ;D
I mean, trojan gen signatures are very easy to generate false positives. So, there is a cautions realease, mostly in weekends and the problems are corrected asap.
They don’t send individual patches, the VPS signatures get modified to ensure this isn’t detected in future. It would then be included in a normal VPS update.
It's a bit annoying seeing the scrolling windows of the on access scanners go from time to time because I have selected Customize for one of them...Sorry I don't understand, what is scrolling, how have you customized one of them (what did you do)?