Ricochet Infinity is giving me a False Positive

Viruses and worms
1

Hi, I’ve been an avast user for some time now, but I have a problem. I’ve been trying to run Reflexive’s Ricochet Infinity game on my computer, it worked find once before, but now avast is marking it as a Trojan and I can’t get it to run. I tried putting the game file in the exclusions path, but every time I run it, avast still blocks it. I already sent a report to avast, is there anything else I can do?

2

Hi LemGambino,

Please could you upload the file to www.virustotal.com to confirm if it is a false positive and report back with the link to the results?

You could also send the file in a password protected archive to virus(at)avast(dot)com with ‘potential false positive’ in the subject line and the password in the email body.

or

You could add the file to the user files of the virus chest and send it from there:

Right click avast icon in taskbar -->click start avast antivirus -->right click scanner background → click virus chest → navigate to user files → click add files →
right click file -->email to alwil software.

NOTE:
The file will actually be uploaded when the next update is performed (you can do a manual update to initiate the sending)

You could also add a link to this thread and some more information when you do.

-Scott-

3

Sent it to avast. I guess all I can do is wait…Funny, Reflexive’s games have had this problem a long time ago, so I don’t know what’s going on with the program giving me an FP. Eh.

4

Well, did you upload it to virustotal? It would help confirm/deny a false positive

5

I couldn’t figure out how to access the file in my Chest folder, all I see is a bunch of numbered files and an xml file.

6

From the outside of the Chest using Explorer all you will see are the names generated by avast and not the original and the files are encrypted (so couldn’t be run or scanned even if you guessed the right one), that is part of the protected status of the chest.

So you have to open the chest and access it inside the Infected Files section of the chest and export it to be able to upload it to VT. As a short cut you can run the \ashChest.exe ( being the folder location avast is installed) file to open the chest without first opening the Simple User Interface.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

7

Looks like Avast managed to take care of it on its own, the game runs fine now.

8

Well I would imagine you weren’t the only avast user to find this issue, so they could have reported it also. Good that it has been resolved.