False positive: Creative SoundBlaster Surround Mixer

The latest database update for Avast! Free edition added the Creative SoundBlaster Surround Mixer application to the list of threats (Win32:Trojan-gen).

Uploaded the file to Virustotal.com for verification: http://www.virustotal.com/file-scan/report.html?id=82e5cc33ba69886d68210914c8d2fe2f65939c5c6d9865fd4842eebe6767872e-1296053493

Only Avast and GData consider it a trojan, all other virus search engines report the file is ok.

Are there any other steps to rectify this? The application is totally clean, been using it for the last 4 years and the machine is completely clean.

Hi,

Gdata also uses avast as one of the two engines. It might be a false positive. Please send the file zipped and password protected (infected) it to virus@avast.com with “False positive” in the subject and link to this topic in the body of the email.

My e-mail services (Hotmail, Gmail, Yahoo! Mail) are denying rights to send the file, as it is an executable and, as it is encrypted, the file cannot be scanned by their virus scan systems.

Any other steps I can take to send this file?

I know for sure that Yahoo is not blocking a pw protected zip file. You must be doing something wrong.

I have disabled Avast for 10 minutes, added the “infected” file to a .ZIP file with a password (infected) and tried to attach it to a message in three services.

Hotmail says I can’t send zipped files with executables. Gmail says the same thing. Yahoo says there’s a problem scanning the file (they use the Norton Anti-virus system).

The file was correctly zipped, used Zip 2.0 encryption. I’ve tested the file and it looks Ok.

I am sending password protected zip.files with hotmail and Gmail almost every day ???

Try free 7zip http://www.filehippo.com/download_7zip_32/

How to encrypt ZIP files securely using 7Zip
http://www.medicalnerds.com/how-to-encrypt-zip-files-securely-using-7zip/

Or send “infected” files from Virus Chest: Main window → Maintenance → Virus Chest.
Right click will open the menus so you can put that files to Virus chest and send them to Virus Lab.

There is no need to password protect these files when you use Virus Chest.

Please get of 7-zip from here : 7-zip.org

Install

Right click on the file to be sent and select 7-zip context menu and select add to archive.

Select 7z from the list of available archive formats

In the encryption area, select encrypt file names option. Use “infected” as the password without quotes. Now you should be able to send it via email.

Without encrypting file names, it is not possible to send via gmail etc.

Presumably this file should have been sent to the chest already:
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.

Yeah, the better way :slight_smile:

Thank you all for your help. File sent for verification. Waiting for your report.

Seems many have forgotten the internal method and plum straight for email.

You generally won’t get a report as such.

  • In the meantime (if you accept the risk), add the full path to the file to the exclusions lists:
    File System Shield, Expert Settings, Exclusions, Add and
    avast Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

No, I haven’t. Unfortunately, I don’t have (or don’t know) some of the technical details required to complete the application form.

So I thought it would be better to ask for some help here.

There have also been lots of “I sendt this from chest several times and still not detected” Post`s

Then they send it in a mail and BING, next day it is detected ???

Generally I only send from the chest and they seem to get dealt with. It is the easier option for the user.

Not to mention in this case is being reported as a false positive which I would imagine is a) filtered and b) possibly receives a higher priority.

Hello,
it should be fixed in current VPS 110126-1.

Milos

Thanks for the quick answer and I’m glad this issue is being solved.

That’s why I love Avast! Great product, great support, great staff!

Keep up the exceptional work!

Already solved. Check for the update manually.