False positive in Gene 6 FTP server

Avast Free Antivirus / Premium Security
1

Suddenly avast flags my G6FTPServer.exe as Win32:Ircbot-BG [Trj] which is wrong, i scanned it with http://virusscan.jotti.org/ and none of the scanners their found any virus, all though i got the:
MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren’t packed and don’t force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.) message and Packers detected: PE_PATCH

I re-installed Gene6 and under the installationen, Avast also detected the G6FTPServer.exe from the installation file, which were downloaded from the official Gene6 site ::slight_smile:

So a false positive.

Using latest VPS: 0539-4

2

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You can add the file path to the exclusions of standard shield (advanced) and the Program Settings (Exclusions), check periodically (scan it) to see if the VPS has been updated.

3

Thanks, will do.

4

Fixed in latest AVS: 0539-6 :slight_smile:

Thanks.