One of my users always gets an alert from avast! when receiving any sort of email from one specific address. No one else gets an alert from this address’s emails, and none of the supposedly infected attachments trigger anything on any other computer with any other antivirus. Is there a way to add this address to a whitelist for scanning? I see the option for spam but that doesn’t seem to be at issue here (and didn’t seem to have any effect).
Hello,
send us (virus@avast.com) the attachement on which is avast! alerting to analyze. Put “False positive” to email subject.
Thank you,
Milos
Thanks. I sent the attachment about six hours ago. Can I expect some sort of followup in the next few days, either here or by email?
It’s been about a month and a half and I haven’t heard back yet. Client is still having issues.
What exactly does the alert say?
Also, what version of avast! are we talking about?
The alert says “Suspicious subject of message” and the subject is “PURCHASE_ORDER_<8 digit number>”. This particular email was forwarded to multiple people and only this one user’s Avast! raised an alert. The version is either 4.8 or 5, I can check and reply back.
Latest avast! version is 6.0.1091.
Tell them to update their avast (if possible)…!
And see, if the problem is solved.
asyn
If the message says “suspicious something”, it’s not an ordinary detection, but rather the e-mail heuristics.
Doesn’t the particular computer have a different setting of Mail Shield / Mail heuristics?
It looks like 4.8 is still being sold as the appropriate business edition. Or is Avast! selling licenses to 4.8 and then advising to upgrade to 6? That seems a bit odd.
Unless something popped up that the user accidentally clicked (for instance, “mark this email as spam?”), no settings have been changed. On the systems that I deal with regularly that run Avast! I never see such prompts.
Well, didn’t know you were talking about business edition, as you posted this in the Free/Pro/Suite section of the forum. You’re right about version 4.8 for business edition.
asyn
with such a topic (okay it may be legit) and the fact that the mail is being forwarded to multiple recipient I’m not surprised that Avast sends an alert. Anyway would be nice if the Avast guy who asked you to send him the attachment (if any) would post back here.
Oh, my apologies. I find the versioning a bit confusing, should have looked more closely. Our support directory contained “setupengpro4.8.exe” (v4.8.1368.0) and “setup_av_pro.exe” (v5.0.594.0) and I had assumed the latter was simply an upgrade to the former, not that they were entirely separate product lines. So given that, I’m not really sure which version they’re running (with regards to the business edition).
Agreed. I sent it to virus@avast.com as requested by Milos above.