Avast & The Cleaner

Avast Free Antivirus / Premium Security
1

I am running AVAST (pro) and The Cleaner professional (an AT program). My AV definitions have just updated to 0441-2.

Unfortunately, AVAST is now advising me that the cleaner monitor (a program to monitor changes to the registry) is infected with Win32.Prorat-I. I believe that this is a false positive. Now every time I boot I keep getting virus alerts.

Please advise how to overcome this problem. Note that uninstalling The Cleaner is not an option.

Jonbvn

2

Jon,

Firstly, I would recommend that you perform an online scan to determine if you ARE infected with the Win32 Prorat.

You can use TrendMicro or Kaspersky.

If and only IF, your system is clean by the online scan, can you assume that Avast is registering a false positive.

You then have the option of going into the Avast Virus Scanner/Exceptions and adding the pathway to the “false” positive. Avast will bypass this file in all future scans.

Good luck.

3

Did an online scan and I am completely clean.

I also scanned the suspicious files with multiple AV’s at http://virusscan.jotti.dhs.org/
Again the files were listed as completely clean. Suprisingly, even AVAST listed

This is a definite FP, and I am setting my exceptions accordingly.

Jonbvn.

4

Further to my previous post, it would seem that even when I set my exceptions, I still keep getting notification of FP’s.

Time to find a better AV…

5

Hi Jonbvn,i’ll be difficult to find such a good AV,wait a little somebody will explain you how to repair this problem.This forum is wonderfull,.try to give the more informations as possible about your configuration ;wait that the PROS of this forum wake up

6

Hi,

I have the same pb with freecommander
www.freecommande.com.
The same virus Win32:Prorat-I [Trj] is reported on 2 different systems since the installation of the last virus definition update (0441-2).

But don’t worry, this little pb won’t change my AV choice.
My company use Norton AV. And I remenber than in the beginning of March, we were hardly attacked by Netsky.D and no NAV update was available during several hours.
Fortunatly Avast Virus cleaner was quicky updated and we can use it to deal with this threat.
Since this, I’m an Avast “ambassador” and I hope than in the futur this AV will have an place in my company.

I prefer a FP pb than a lack of reactivity.

Regards,
Sam.

PS: Sorry for my english (I’m french).

7

oops sorry for the bad links, the true is:
http://www.freecommander.com/index_en.htm

8

I also get a report from AVAST that “\THE CLEANER\moolive.exe” is infected
with “Win32:Prorat-I [Trj]”

Jan

9

This looks like false positive. Please send the files reported as infected in a password protected zip to virus@avast.com. Mention in the mail as what it is detected, that you think it is a false positive and the password ofcourse.

10

Send the file to virus@avast.com

Regards,
Jan

11

well this one got me also i got the same msg

THE CLEANER\moolive.exe" is infected
with “Win32:Prorat-I [Trj]”

i guess i panicked and erased it, it seems i was not the only one nice to know after getting more information

and funny enough i cannot get avast to do a complete scan or check c: without it rebooting the system