cain

cannot stop avast from seeing cain.exe as a virus. have put all the files in the exclusions but no dice. Any help would be appreciated…is very annoying.

There are 2 exclution lists. The on access and on demand.

For the on access list, left click the “a” icon, select stantard shield, customize button, advanced tab.

For the on demand list, right click the “a” icon, select program settings, exclutions.

Well if you do a google search for cain.exe you will find several hits relating to malware.

http://spywarefiles.prevx.com/RRHFDI000270568/CAIN.EXE.html
http://www.sophos.com/security/analyses/trojcain20.html
http://www.glocksoft.com/trojan_list/Cain_&_Abel.htm
http://www.pestpatrol.com/spywarecenter/pest.aspx?id=453101549.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 32 different scanners.
Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can’t do this with the file in the chest, you will need to move it out.

@DavidR

I think this is the same program as the one the poster described here

http://forum.avast.com/index.php?topic=26012.30

and quite possibly the same problem, using the wrong or only one exclution list.

That may well be the case, but it still needs to be confirmed and if no other AV detects it (which I doubt) then it should be submitted to avast for further analysis and correction of an FP.

Hello. A lot of AV vendors see this program as a Possibly Unwanted Program. It is a network security and password tool, but like any other powerful tool, can be misused by bad people. Maybe some AV’s will exclude it’s detection, but I doubt it. PUP detections are a good thing for AV to have in case someone installs keylogger, system monitor, or other spy programs without your consent. Exclusion should work provided you follow the others advice on using both exclusion locations. I have a few security programs and exclusion in avast! works good. Hope this helps. :slight_smile: