Exclusion fails for DOS-based game

Running avast! Free 2015.10.0.2208 under Win7 x64 Home Premium

Been using avast! for a long time, conversant overall in user settings. Global exclusions are working correctly except in one case – an old DOS-based game I still like to play. Loading it is flagged and halted with this description:

Object: C:\PROGRA~2\IXS ReCharge\ReCharge.exe
Infection: Win32:Evo-gen [Susp]
Process: C:\Windows\explorer.exe
(alt: C:\Windows\System32\rundll32.exe)

I’ve set the exclusion in three places: General / Exclusions, File System Shield / Exclusions, and Deep Scan / Exclusions but the file continues to be flagged. Confusingly the entire program folder is declared clean if manually scanned from the contect menu. I prefer not to enable Persistent Caching if possible. I’ve also reported/submitted the file as a false positive but I realize a correction may be long in coming.

Other than disabling protection before loading the game, any ideas? The only clue I have from reading through the Forum is the old 8.1 filename as appears above in the popup text versus the long file name correctly appearing in the exclusion settings dialogs, but not sure what to do about that if anything.

THX in advance!

You can report a possible FP here: http://www.avast.com/contact-us.php?subject=VIRUS-FILE

To check files upload to either of the following…

http://virusscan.jotti.org/en
https://www.metascan-online.com/
http://www.virscan.org/

What is the full exclusion you are putting in place ?

In this case it is being detected by the file system shield, so the others shouldn’t make any difference.

I had a similar issue with the exclusions (this may be what you were reading), when the path given in the alert was in the old 8.3 file format were you get something like this C:\PROGRA~2\ in the path. If the exclusion isn’t in this format C:\PROGRA~2\IXS ReCharge\ReCharge.exe then it is possible that the exclusion won’t recognise the location.

What is the full exclusion you are putting in place ?

Conflicting details, which may be part of the issue.

When the warning popup appears the path is indicated as shown above: C:\PROGRA~2\IXS ReCharge\ReCharge.exe
But in the File Shield Exclusions dialog it appears as: C:\Program Files (x86)\IXS ReCharge*

All other correctly excluded apps show long file names in the File Shield Exclusion window - eg, C:\Program Files (x86)\EMET 5.1*

Should I / can I manually edit the Exclusion LFN to the 8.1 version?

I would say that you can/should change the exclusion to match that of the alert window - which is what I had to do for an exclusion issue in the Hardened Mode function (disabled by default).

I would say that you can/should change the exclusion to match that of the alert window

Thanks - seems to have done the trick. Manually edited the LFN under File Shield / Exclusions to match the 8.1 filename of the popup and after reboot was able to load the game without interference. Yay! That said, there’s a glitch in the Exclusion matrix that somebody needs to address.

Thanks again. JLJ

You’re welcome.

Yes, this wasn’t an issue in earlier versions of avast regardless of what format the path was in, short or long paths.

Now that you have the exclusion path sorted, I would suggest that you submit the file to the avast virus lab for analysis and correction of the detection as required. That way it will benefit you and any other users that might have this program.

If you have this file in the virus chest - right click on it and select ‘Submit to virus lab…’ option.