Even without performing a scan as such, Avast Free Antivirus 8.0.1488.286 (latest version, updated definitions) shields control repeatedly detects the following:
File name SVC: swcustcfg > ??[b][/b]?Rootkit name
Rootkit: hidden service
An Avast forums search suggests it is a false-positive related to the wireless device (internet modem) we have installed.
http://forum.avast.com/index.php?topic=99515.0
http://forum.avast.com/index.php?topic=101686.0
http://forum.avast.com/index.php?topic=102456.0
None of the 3 action options (Move to Chest/Repair/Delete) is able to be performed successfully, with each option returning an identical error message, and the issue remains unresolved.
The ‘Global Exclusions’ setting is not able to be used as there is no file path given and none exists as such (a comprehensive Windows search returns 0 results for any file named “svc” or “swcustcfg”) and the detection is believed to be registry related.
A boot-time scan does not detect any problems and returns 0 results (presumably because the service is not running at that time).
A Malwarebytes scan (latest version, updated definitions) does not detect any problems and returns 0 results.
So, our only 2 real options are:
- Put up with the false-positive nag screen every time we go to use the computer (as we have been doing for over 2 months)
- Uninstall Avast and use an alternative antivirus program
As such, there exists a genuine need for Avast to have an ‘Ignore’ option. I understand that it once used to, so the question would be, why was it removed?
Operating system: Windows XP SP3
