false? alert since new AVS for very old dos-progs

Viruses and worms
1

Since 3-4 days I get warnings for 2 very old DOS-files.
I can hardly believe that this is correct.

Touch.exe okt-1991 : Insuff
Mi.com jun-1991 : Monster-B

I am pretty sure it is a false warning,
ClamWin does not see anything wrong with it.

I don’t use these programs anymore, but the are in a lot of backup archives.
So it is getting pretty annoying to skip 30 warnings

Questions:

  • Is it a false warning?
    Or are very old viruses recently added to the avs-list?
  • If false, how can I somehow skip detection for them?

Thanks
SCS

2

Most probably. To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be carefull, you should ‘exclude’ that many files that let your system in danger.

3

Thanks,

I did just test them with JOTTI and no real warnings.
Strange that even Avast is not giving a warning there to.
(May be the use older defination files?)

I emailed the 2 files as you mentioned to avast.

SCS

4

Virus Total uses the Windows version of the AVs so avast has more unpackers for Windows and that is the version most are using. It’s strange that they’re not using the last virus database :frowning:

5

Try looking at this :

http://forum.avast.com/index.php?topic=25009.msg204838#msg204838

Welcome to the Forum :wink:

Al968