I’d really like if you could somehow analyze the crinkler executable file compressor (http://www.crinkler.net), so Avast doesn’t report false positives for all files of that type. It’s really a pain since close to every single demoscene production less than 64KB in size get caught and blocked.
I’m sure Rune and Aske (the authors of Crinkler) would be happy to help out in establishing a way to prevent files packed with crinkler to report false positive.
Whilst I’m unable to help directly as I’m only an avast user, it is a bit strange that only files below 64KB are detected and not those above it. So perhaps a question of the authors of what the difference between the two might be.
Do you mean crinkler.exe when you talk of the 4k executable, if so avast doesn’t alert on that ?
Sorry I can’t check out the demoscene.tv links being on dial-up it is a no go on this media intensive site.
I’m sorry - Probably could have put it more clearly.
What I meant was, that close to every released production in size-limited competitions uses Crinkler.
I don’t think crinkler.exe itself gets caught. Only the productions compressed using Crinkler.
If Crinkler was used to compress productions of larger size, they’d get caught as well.
To analyse a production compressed with Crinkler, get the Elevated intro here: http://www.scene.org/file_dl.php?url=http://http.se.scene.org/pub/scene.org/parties/2009/breakpoint09/in4k/rgba_tbc_elevated.zip&id=517890
It’s 4KB so even slow connections should do just fine
So it looks like the the crinkler executable file compressor has problems with multiple AVs. So I don’t really know how to proceed as avast isn’t alerting on any of those files I downloaded.
So if you have some that avast is alerting on then you too could check the virustotal results and submit samples to avast.
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and possible false positive in the subject (though if multiple scanners detect it that is a tough one to sell).
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
