Endpoint Protection Pro Plus Deleted a Safe PNG Image

I am still using Endpoint Protection Pro Plus (8.0.1609; definitions version 200331-6 hmm… seems kinda old…) on Windows 7 machines. Anyway…

Yesterday I ran a full scan of a Win 7 Ultimate machine (including delete content inside archives). It deleted a mere PICTURE (a PNG screen shot) of a Microsoft Word “enable this content” screen from inside of a PowerPoint presentation. It also deleted the actual PNG file that I had used for the presentation. Fortunately I have a copy of the PowerPoint elsewhere. If I want the actual PNG I can just take a screenshot of that. And then what, will avast! delete that PNG?

It’s an IT Security training presentation. Of COURSE it’s going to contain pictures of dangerous stuff. I mean, come on guys, really??

Yes, I’ll file a false positive report.

I uploaded the original PowerPoint File to VirusTotal. The only engines that had a problem were Avast and Avast-owned AVG:

https://www.virustotal.com/gui/file/d15a8def4f35f098d11750c55e853491eb6a8867ca8d864829302eb8feee5eff/detection

However, the VirusTotal details don’t appear to provide any justification for these findings. It’s probably a brain-dead heuristic instead of an actual detection of dangerous code.

I filed a false positive report.

1 Like

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

1 Like

Yes. as I said (twice), I reported the false positive.

I’ve reported it to Avast. Let’s see if that helps.

Thank you.

Read here: https://forum.avast.com/index.php?topic=233272.0

Thank you. First, I’ve been notified by email that this false positive has been removed.

As to the thread about the end of support for that version referenced by Asyn, I’ve posted a response in that discussion. I will only repeat here that Avast should directly notify its paying customers, in advance, by email, of events like this rather than requiring us to constantly monitor a website that is largely manned by volunteers to find out about such important news. No, the resellers cannot be relied upon to do this. The only time my reseller talks to me is when they want me to buy another subscription.

You’re welcome.