I just upgraded the the new version of avast today and applied the new patch for the PC game Call of Duty: World At War, and after restarting my computer upon completion of the avast update, and then again upon completion of the CoD update (this one was my choice). I start playing a different game and Avast pops up saying it found malware entitled Punkbuster in my system32 file. It suggests I ignore it, and then suggests a boot scan. I thought the punkbuster problem was fixed way back in July, why is it doing this again?
Depends if there have been any changes to a) the punkbuster file/s or b) a change to the detection signature.
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.
If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.
Well the thing is, I have 2 computers. One for school/browsing, and the other for gaming.
Just for security I still have avast installed on my gaming computer as well. And since I only use it for gaming, the odds of my contracting a virus are low. I’ve had Call of Duty and PunkBuster installed for awhile on that comp now, like I said all I did was install a new Call of Duty patch and install the New avast version that came out in the last few days.
What you say doesn’t change your problem or how to resolve it.
You have to confirm the detection one way or another and reoprt it (send a sample) so that it can be corrected.
I can do nothing I’m just an avast user like yourself.
Oh, I thought you were posting about diagnostics assuming it was a virus.
I uploaded it, and apparently the only program that finds it suspicious is eSafe. So I’m assuming either this site is using the older version of avast, or avast patched it already.
eSafe has nothing to do with avast, there are 39 different scanners and the idea of that is it provides either:
confirmation, multiple detections by other scanners or
denial, no other scanners detect it, or very few and what they actually detect, this it why it is requested that you post the link to the actual results.
You should however submit this as a possible false positive, the how to report link in my first post.
It isn’t unusual to not have avast detect on VirusTotal when it does so on your system. VT isn’t able to update the VPS in real time as the user is and this is often the cause. Remember the point of submitting it to VT is to see what the other scanners find.
You can scan the suspect file again with avast that would confirm if avast has corrected this if not you has to submit the sample.
Punkbuster is kina like scurom it has virus like fuctions in a way therefor avast may have sensed it as one
the problem with ‘whitelisting’ EvenBalance’s PunkBuster is that there are many versions for different OSes and for different games and it’s quite often updated thus You end with dozens to hundreds ‘active’ builds in public use …
so i guess only way is that Alwil contacts directly EvenBalance to e.g. establish some sort of communication and asap access to latest builds from ‘secure’ source (authors)