FALSE POSITIVE ON AN ONLINE GAME LAUNCHER

Avast detected the file as a virus/trojan…however im sure the file is clean, its an online game launcher (SwordsMan-PW.exe)…and i cant add it in the exclusion since the exclusion list doesn’t include resident protection… may i know where to submit/report the file for avast to verify it?

thank you

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add (this is the one you missed for on-access, resident) and
Program Settings, Exclusions (right click the avast ’ a ’ icon)

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive/undetected malware in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already there) where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.

thanks for the info, its a lot of help

No problem, glad I could help.

Welcome to the forums.