false positive.

1.avast found a virus so i transfered it to the chest. i then scanned it a week or so later and it comes up no virus. i believe this is known as a false positive(correct me if i’m wrong).

2.when false positives are restored, do they have to be put in the exclusion list. or will avast ignore it automatically seeing as it’s been identified as a false positive?

I’m afraid you would have to supply some more information (filename / virusname / …) if we should be able to say whether this was a false positive or not :wink:

If a false positive has been fixed, avast! is not detecting the particular file anymore - so it’s not necessary to put it to the list of exclusions (the list of exclusions is handy when the FP was not fixed yet - i.e. when the file is still detected as infected when scanned; the list of exclusions prevents avast! from scanning the file - thus also from detecting).

Name- PSKILL.EXE.2.vir

original location- C:\Program Files\Alwil Software\Avast 4\DATA\moved

Virus- Win32:Pskill-E [Tool] i think.

I just remembered i have put a post about this before, and decided to leave it to check if it was a false positive.

guys the link posted here was really really misleading.
i took a look at this from a dual boot system with Windows xp and linux (Ubuntu dapper drake),
i don’t have any AV program for linux and when i took a look at the file in the link,(the download),
th system paused for a moment without doing any thing,
the windows partitions were mounted and now when i restarted the system ,
the windows operating system refuses to boot and i think there is a virus corrupting it so anybody please help,if you can. :-\

Well, this detection was not the usual false positive (avast! detecting something we didn’t want to detect), the detection of PSKILL was intentional… but we decided that we remove this signature for now (until there are ways to configure avast! not to detect [Tool]'s if the users decides so).
So yes, you can call it a false positive.

i think that there has been a mistake,this is not that topic i saw the link on (i think)
but it was some link.
i will surely furnish more information in a bit

the actual topic is “is this false positive?”
where a link to a foundstone.com is given.please help

riskpusher4life this topic is false positive but no link as been given.

igor thanks for the quick replies, but do i have to put the files in the exclusion list if i restore them?

No.