Possible false positive with Win16:Ps-c

Hi all,

My name is Rodolfo and I’m from Anasoft, a software publisher in Brazil / South America. Some days ago, some users reported trojans in one of our CD’s.

We have scanned our CD’s with Grisoft AVG and Symantec Norton Antivirus and no viruses were found. This only happens with Alwil avast!, which is very popular here in Brazil, if you ask me.

I’ve submitted the file to VirusTotal online scanner and it has been tested with 30 antivirus and - guess - only avast! recognize it as a trojan.

It’s currently detected as Win16:Ps-C . I’ve checked Alwil reports @ the website and it seems that this virus is detect by an update released in 12/03/2006 (and later).

I have attached one zipped copy of the file AND it’s md5 hash.

The zip copy is password-protected.
Password: anasoft

D/L here

So, I would like to ask if you can fix this possible false positive error or tell me more about this problem, otherwise, we will only ask the customers to remove avast! and install AVG.

Can someone help me?

PS. I’ve already sent an e-mail to support@avast.com on 12/13/2006, but no answer ???

Hello :slight_smile:

Please sent the file in password protected archive to virus@avast.com and as a mail subject write “False Positive” :wink:

Welcome for you and Anasoft :wink:

I wish it was more than AVG… at least, avast is on Portuguese and AVG only in the paid version.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be carefull, you should ‘exclude’ that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file - there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

Well, the good will be the email posted by XMAS.
Sorry for the lack of support :-[

Xmas: Thanks, I’ve sent the e-mail.

Tech: Thanks for the welcome :wink:
Yes, AVG is somewhat more popular, maybe just because of advertising. ???

I’ll let you know if something arises.

You’re welcome :slight_smile:
And btw welcome to the forums :slight_smile:

I see no other reason… I’ve used AVG for one year, one year and a half…, no thanks.
I’d rather use avast pretty much 8)

Hi all!

Thanks for the support. Problem fixed, archive no longer detected as Trojan! :smiley:

Thanks for posting back.
Welcome to avast forums 8)