I recently had to remove Avast because of false positives.I still have remnants in my registry.Legacy_Avast_Mail_Scanner. I cannot seem to remove these.Can you help? Windows 2000-1.8 Mhz-384 SDRam
These keys were created by Windows itself - and when the right time comes, Windows will also remove them. I.e. there’s no need to worry about them.
Can you tell us something more about the false positives? Did you submit the affected files?
I downloaded a safe file from Alumna Forum and Avast said it had a virus,which it didnt have.
If you still have the file, submit it to avast so the VPS can be updated.
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.
Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner
If it is indeed a false positive, add it to the exclusions lists and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives
What file (product) was it?
Trend Micro SystemClean.
Well, in that case, my guess would be improperly scrambled virus signatures in SystemClean (but it’s just a guess, I didn’t see the file).
Trend Micro Sysclean Package
http://mywebpages.comcast.net/SupportCD/SecureXP.html
Update - If you run the Sysclean Package after Avast! is installed, Avast! will falsely detect the sysclean.com file as infected with VBS:Redlof. This has to do with the Sysclean Package’s cleaning database not being encrypted, so the code line in the database used for detection of VBS:Redlof is falsely detected as the Virus itself. Other AntiVirus Programs may give the same false alarm. Before running the Sysclean Package you will need to temporarily disable Avast! or your AntiVirus program.
More information here:
http://www.trendmicro.com/search/google/en-us/results.asp?lr=lang_en-us&q=Avast!
Thank you,thats it.:>)