Pro Evolution Soccer 5; False Positive

Avast Free Antivirus / Premium Security
1

Hello.

OS: Windows Vista Home Premium
(avast! 4.7.1001 VPS 000740-2)
Today when I put avast! do on-demand scan it alerted: Win32:Agent-GYA[trj] founded in C:\Pelit\KONAMI\Pro evolution soccer 5\dat\0_text.afs
Well, I think that it is better to tell you that “Pelit” means Games in English (it is Finnish language).
The file is over 400mb so should I send it somewhere (I have only slow broadband connection)? I’m sure that it isn’t a trojan.

EDIT: just updated VPS 000741-0, it didn’t help in this problem. So avast! still alerted about that file when I scanned it.

2

You won’t be able to submit it to JOTTI or VirusTotal due to its size.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be careful, you should ‘exclude’ that many files that let your system in danger.
When it is no longer detected as being infected then you can also remove it from the Exclusion list.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838

3

Hi.

avast! doesn’t detect this with on-access scanner so it isn’t a problem. I tried to zip and it is still about 380 mb. So that’s very difficult, if I send it would take over 2 hours to send it.

Well I found this topic: http://forum.avast.com/index.php?board=2;action=display;threadid=7779

You can also add web address to that file (or webpage of the file/program) if it's on the internet. Add your own note on why do you think that it's a false positive. Every info helps Alwil staff.

So there is demo version available. I think it includes nearly same files, so I send e-mail to Alwil and put link to demo-version.

4

You can post it here (editing it to not let it live, as we don’t post live links to false positives or malware).

5

I sent e-mail to Alwil and put link to download.com Pro evolution soccer download page (it was first google’s search result when I searched pro evolution soccer 5 demo).

Thanks for help.