Author Topic: Avast Anti-Virus False Positive?  (Read 13167 times)

strettonbull

  • Guest
Avast Anti-Virus False Positive?
« on: May 13, 2009, 08:40:55 pm »
From this morning (14th May 2009) Avast Anti Virus  won't let me open Bit Che

Win32 Trojan-gen is the warning.

Anyone else getting this?

T-Bird

  • Guest
virus
« Reply #1 on: May 13, 2009, 09:07:51 pm »
whats with the virus avast says it has

gandalf76

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #2 on: May 13, 2009, 11:14:05 pm »
same problem... help! i can't install bit che!

Chaponnet

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #3 on: May 14, 2009, 01:06:06 am »
same thing since yesterday 15H00 EST. Bitche was open, Avast must have updated signatures at that time.

TommyDGNR8

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #4 on: May 14, 2009, 02:36:14 am »
Same problem here - similar thing happened 6 months or so ago with AVG.

Hopefully, this will be resolved just as quickly.

Joe91

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #5 on: May 14, 2009, 03:02:55 am »
work-around as follows - should be able to right click Avast! icon in tray - progarm settings... exclusions and register path e.g C:\Program Files\Bit Che\ so be excepted from scans. Avast usually tells you what the path is.  Best to set Avast! so that it asks for action from user so that it does not delete files! Hope this helps

thisisstupid

  • Guest
trojan in bitche.exe
« Reply #6 on: May 14, 2009, 11:07:26 pm »
g-data antiivirus is reporting and blocking access to bitche claiming win32:trojan-gen

http://www.gdatasoftware.com/

it has also constantly warned about your script updating

TommyDGNR8

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #7 on: May 15, 2009, 02:29:05 am »
Thanks for that, Joe.

I've submitted a False Positive report to Avast - if everyone else does the same when they see the alert splash then it'll be fixed quicker.

TommyDGNR8

  • Guest
Re: trojan in bitche.exe
« Reply #8 on: May 15, 2009, 02:33:02 am »
See the Avast thread - G-Data uses the Avast engine.

vicvergarajr

  • Guest
Re: Avast Anti-Virus False Positive?
« Reply #9 on: May 15, 2009, 05:39:23 am »
From this morning (14th May 2009) Avast Anti Virus  won't let me open Bit Che

Win32 Trojan-gen is the warning.

Anyone else getting this?

Same here, Win32 Trojan-gen warning

Offline chip!

  • Bad Ass
  • Administrator
  • Unstoppable
  • *****
  • Posts: 2301
  • Karma: +629/-6
    • View Profile
Re: Avast Anti-Virus False Positive?
« Reply #10 on: May 15, 2009, 07:52:57 am »
Hi All,

Avast.. (and GData, which uses Avast).. are incorrectly reporting Bit Che's packer as a trojan. This has happened before and they are usually pretty good about fixing their false-positive hits, so we shall see. 

In the meantime.. as Joe has pointed out:


1.  You need to use the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the 'a' blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button...

For the other providers (on-demand scanning such as the screen-saver or the Simple User Interface):
Right click the 'a' blue icon, click Program Settings.
Go to Exclusions tab and click on Add button...

Add all of the items listed below. But the most important one is "Bit_Che.exe".


2.  Please send a "false-positive" report to Avast so that they can resolve the problem. Thanks everyone!

Compress the file in a zip folder and send it to virus@avast.com.






Here are the Modules required for the exception list, and also to .zip up and send to the AntiVirus company for the false positive report.


1. Main application:

%programfiles%\Bit Che\Bit_Che.exe

2. Support modules:

%appdata%\Convivea\Bit_Che\scripts\x.exe
%appdata%\Convivea\Bit_Che\scripts\update.exe
%appdata%\Convivea\Bit_Che\scripts\special.exe


EDIT:   I dont use Avast, so I dont know is simply adding the abbreviated path names will work, as shown above, or if they will need to be converted to the actual path.. (ie, C:\Users\[USERNAME]\AppData\Roaming\Convivea\Bit_Che\scripts\x.exe). Can anyone confirm or refute this?

Thanks,

-chip
« Last Edit: May 15, 2009, 08:13:54 am by chip! »
  -  https://convivea.com  -   And...  boom goes the dynamite.

Offline chip!

  • Bad Ass
  • Administrator
  • Unstoppable
  • *****
  • Posts: 2301
  • Karma: +629/-6
    • View Profile
Re: Avast Anti-Virus False Positive?
« Reply #11 on: May 20, 2009, 05:50:54 pm »
I have been informed from Avast that they have corrected the problem. Everyone who uses Avast, please update your virus definitions :)
  -  https://convivea.com  -   And...  boom goes the dynamite.