I believe the file was last scanned by virustotal.com in 2009, so I guess I was the first to test it this time. Does that mean I should also upload the file to Avast somewhere? If so, how do I do that?
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update. A link to this topic wouldn’t hurt.
@@@@
In the meantime (if you accept the risk), add the full path to the file to the exclusions lists (see Note below): File System Shield, Expert Settings, Exclusions, Add and avast Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.
Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the * to \file_name.exe where file_name.exe is the file you want to exclude.
Whilst that is correct if on default settings. But the problem with that is that the user has to have a reasonable idea that it is a false positive at the time of the alert.
Afterwards this isn’t always possible, so if you go down the route of confirming it is an FP at VT, etc. as the OP has that option may not be available, but sending from the chest will be.
If I understand correctly, this is something I would do in order to be able to use the file as before, and to avoid continued warnings? In this case, I can happily keep it in the chest, as I’m not using it. That’s what happens when you have too much disk space, you end up with lots of old stuff lying around.
Thanks for your input, I’ll try to upload the file to the virus lab.
