possible false positive

http://i37.tinypic.com/1zd82ur.jpg

this was logged yesterday,i scanned the file with malwerbytes and was all clear.

could it be a false positive,thanks Paul.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.

Can you send the file to virus (at) avast (dot) com for analysis?
You can use the virus alert or send it within chest.
You can also submit the file to www.virustotal.com

oops, David was faster as usual ;D

Hi,thanks for the replys,i have sent the file to avast from the chest.

bit of a newby with computers,when i send the suspicious file to virus total it says no bytes sent ???

Probably avast is blocking it… Use the C:\Suspect\ folder as David said.

No problem, glad I could help.

Yes that is an indication of avast stopping anything being done with what it considers an infected file, so you need to do as suggested creation and exclusion of the folder, etc.

Welcome to the forums.

http://www.virustotal.com/analisis/8a4b1b76261135b64f82d79b6d3d99c098fc76890f12a1f6a5d73cbd558466a8-1255359374

ok finally sorted it.

not noticed any strange behaviour with the firewall etc,hope this helps,thanks Paul.

Yes, that pretty much confirms it as an FP as GData uses avast as one of its two scanners.

If you haven’t already done so you should send the sample to avast, as outlined in the link in my first post, ‘how to report’, etc…

:slight_smile: ok thanks David,i sent it from the chest yesterday,thanks for the update.

No problem, a belated welcome to the forums.