Incorrect Detection

Hello,

I would like to point out a false detection which is basicly a batch file compiled,the batch file only shutsdown processes, and the other one is with adding a registery key.
The compiler is Quick Batch Compiler.

Any questions please ask to get that false possitive out.

MounierNetwork

Hi mouniernetwork…

Unless someone else knows differently, I would just send a note explaining what you just have with your post and the file and send it to…

virus@avast.com

Best regards…

I did and it still is detected ???
Should I post the files on the forum ?

MounierNetwork

It will continue to be detected until such time as it is either corrected in the VPS or you add it to the exclusions lists.
If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives

It may be because of its actions shutting down stuff, it could also be used for malicious purposes. What did avast detect it as ?

Well, I’m afraid you’re a little too fast; if the file is found to be a false alarm, it will be fixed in the next VPS update.
Is the compiler downloadable somewhere?

Yes the compiler can be downloaded, yes I do agreee that those actions can be mal-used, but maybe the detection should detect it if it shutsdown a specific process.(Avast is vulnerable to this type of attack,it can be shutodwn)
The virus is W32.Trojan-gen {delphi}.

Thank You

MounierNetwork

the false detction is still present ??? ???

Please change it >:(

MounierNetwork

Hi mouniernetwork…

Try sending another e-mail to Alwil and let them know the urgency concerning this. ::slight_smile:

Best regards…