False positives

john · Apr 11, 2011, 23:17:01

I recently loaded Avast 6 as it said that my previous version (I think it was 4.8) had expired. Since installing it it has been reporting suspicioius sites and even reports an issue when opening Windows Explorer. So far it hasn't actually blocked any sites so I'm persevering with it as it hot caused much of a problem but hopefully they'll have some updates for it soon. I've left Microsoft Security Essentials still running and this has blocked the occaisional threat before Avast. Avast also frequently reports issues with MSE files too and maybe there could be a conflict between them.

Gary · Apr 11, 2011, 23:17:30

Quote from: pctech on Apr 11, 2011, 21:53:54
Blimey something must have gone wrong for Avast to start behaving like *cough* Norton *cough*

Norton is not the beast it used to be Mitch, it has for the last few years now had stellar ratings and reviews, being close or on top with detection ratings on AV comparatives at points. Symantecs false positives are I believe also very low, much lower than Prevx, which is really good I use it on Justina's Laptop, but I hope webrot wont ruin it now they own it

Prevx is a great bow to the security arsenal.

Gary · Apr 11, 2011, 23:19:48

Quote from: john on Apr 11, 2011, 23:17:01
I recently loaded Avast 6 as it said that my previous version (I think it was 4.8) had expired. Since installing it it has been reporting suspicioius sites and even reports an issue when opening Windows Explorer. So far it hasn't actually blocked any sites so I'm persevering with it as it hot caused much of a problem but hopefully they'll have some updates for it soon. I've left Microsoft Security Essentials still running and this has blocked the occaisional threat before Avast. Avast also frequently reports issues with MSE files too and maybe there could be a conflict between them.

You cant have two AV's running on one machine, MSE is an AV in real time and so is Avast, I would think that could be a nightmare, unless you can turn MSE into an on demand only scanner maybe, its like having two software firewalls running, it would cause loads of issues.

john · Apr 11, 2011, 23:32:44

I've had a previous version of Avast and MSE running happily for many months without any issues (that I've noticed anyway). In fact when I bought the laptop many years ago a trial version of Mcafee was installed and although the trial expired a few months after there still seems to be some basic features still running (and it sometimes prompts me to upgrade it).

sparkler · Apr 11, 2011, 23:48:48

nortan has low false positives if you don't include WS.REPUTATION.1 that go's off when trying to download/install open source software

Ray · Apr 12, 2011, 08:14:02

Quote from: Gary on Apr 11, 2011, 23:17:30
Norton is not the beast it used to be Mitch, it has for the last few years now had stellar ratings and reviews, being close or on top with detection ratings on AV comparatives at points. Symantecs false positives are I believe also very low, much lower than Prevx, which is really good I use it on Justina's Laptop, but I hope webrot wont ruin it now they own it Prevx is a great bow to the security arsenal.

I agree, Gary, there's no problem with Norton now I've been running it for just over a year now on my 3 machines with no problem and no false positives, it's also very light on system resources now as well.

Technical Ben · Apr 12, 2011, 08:33:40

Quote from: .Griff. on Apr 11, 2011, 22:28:37
I've been using MSE for ages now without any issues.

Might be worth a try.

This. It's so fast (cheeky MS API insider information and coding

) and had no false positives. Especially handy as my version of Java keeps picking up trojans.

Technical Ben · Apr 12, 2011, 08:35:44

Quote from: john on Apr 11, 2011, 23:32:44
I've had a previous version of Avast and MSE running happily for many months without any issues (that I've noticed anyway). In fact when I bought the laptop many years ago a trial version of Mcafee was installed and although the trial expired a few months after there still seems to be some basic features still running (and it sometimes prompts me to upgrade it).

You can run your diesel engine on unleaded for a few days without any issues. It's not recommended though.

john · Apr 12, 2011, 12:37:26

Hardly the same thing and more than one AV has been running on my laptops for well over a year (maybe even two) rather than a few days. If there had been any issues I would have decided on just one.

Anyway I haven't got a diesel engine

pctech · Apr 12, 2011, 17:16:38

Would definitely recommend Prevx £25 for a year, its server based so constantly updated and has caught a few things.

As for Avast, have you tried removal and reinstallation Niall as the new engine may work provided its not been installed over previous installs.

Technical Ben · Apr 12, 2011, 17:29:29

I'm not causing trouble John, I hope you realise. It is honest concern. For example, http://www.avast.com/en-gb/free-antivirus-download#tab2 The bottom has the warning.
Plus Microsoft's page as well. http://www.microsoft.com/en-gb/security_essentials/Support/4cae1455-6ead-493c-b5d8-7c88f39c0656.aspx
Granted, Microsoft say "may" not "will". But it still stands that it's not a safe operation of software.

pctech · Apr 12, 2011, 17:32:23

Dealt with quite a few people running more than one AV and it creates quite a performance hit on the system and in some cases has caused O/S instability due to the file system drivers conflicting with each other.

JB · Apr 12, 2011, 17:54:19

This is a bit weird. I'm running the free version of Avast on a couple of machines here and I haven't seen any reports at all over the last 48 hours. Currently my virus definitions are 110412-0 and as far as I can tell this has been updated every day.

If I hadn't spotted this thread I wouldn't have had any idea anything was up.

john · Apr 12, 2011, 17:59:13

Quote from: Technical Ben on Apr 12, 2011, 17:29:29
I'm not causing trouble John, I hope you realise. It is honest concern.

I hope I haven't unintentionally given the wrong impression, I didn't think for a moment you were causing trouble and thanks for your concern.

I am aware of potential software conflicts but I was prepared to try it on my own laptops and haven't noticed any problems and the machines run perfectly okay. If they start to run slowly or other problems manifest themselves then I'll certainly consider removing one of them.

Quote from: pctech on Apr 12, 2011, 17:32:23
Dealt with quite a few people running more than one AV and it creates quite a performance hit on the system and in some cases has caused O/S instability due to the file system drivers conflicting with each other.

Thanks, I appreciate there is the potential for a performance hit but both laptops respond okay. My eldest daughter has a more recent laptop which I haven't loaded any additional AV software on and I haven't noticed that it runs any faster. Maybe if I was using more demanding applications then any performance issues would indeed be noticable.

Technical Ben · Apr 12, 2011, 20:41:40

Oh, I never thought you were giving the wrong impression. Just that I was going on about it a bit too much, so thought I'd mention it. You should see me when I get hold of a the family PC and the Smiley Software pops up. Thanks.

Technical Ben · Apr 12, 2011, 20:42:02

Quote from: Technical Ben on Apr 12, 2011, 20:41:40
Oh, I never thought you were giving the wrong impression. Just that I was going on about it a bit too much, so thought I'd warn you what I get like. You should see me when I get hold of a the family PC and the Smiley Software pops up. Thanks.

Lance · Apr 12, 2011, 23:06:37

It's never good when you start quoting your own posts!

Simon · Apr 12, 2011, 23:09:52

Technical Ben · Apr 13, 2011, 08:15:48

Must have clicked the wrong button.

Buttons will be the death of me.

Ray · Apr 13, 2011, 08:20:32

Gary · Apr 13, 2011, 09:25:27

Quote from: john on Apr 12, 2011, 17:59:13
I hope I haven't unintentionally given the wrong impression, I didn't think for a moment you were causing trouble and thanks for your concern.

I am aware of potential software conflicts but I was prepared to try it on my own laptops and haven't noticed any problems and the machines run perfectly okay. If they start to run slowly or other problems manifest themselves then I'll certainly consider removing one of them.

Thanks, I appreciate there is the potential for a performance hit but both laptops respond okay. My eldest daughter has a more recent laptop which I haven't loaded any additional AV software on and I haven't noticed that it runs any faster. Maybe if I was using more demanding applications then any performance issues would indeed be noticable.

The problem is really you are meant to use one AV, its that simple, the hooks they put in could mean you end up with less protection nas they can cancel each other out, or worse, saw MSE finds a baddy then Avast will see MSE as a threat and try to delete what MSE has tried to deal with thus causing hell as it may take down MSE which in turn will fight back, running two AV's in my opinion is just pointless, one plus a program like prevx and/or an on demand scanner is the best option. Anywhere you go on the net they generally say never run two AV's its a ticking time bomb, and as I siad, you may end up with less protection than you think, less is more sometimes.

pctech · Apr 13, 2011, 09:59:04

Had that debate with many folks myself Gary but in a lot of cases they don't tend to listen until they get bitten.

David · Apr 13, 2011, 17:18:24

http://www.theregister.co.uk/2011/04/12/avast_update_snafu/

sparkler · Apr 13, 2011, 22:30:12

ive got you antivirus/firewall software installed on my pc and no conflicts what so ever i just shove one into a vm

pctech · Apr 14, 2011, 09:17:33

But it cant 'see' outside the VM though so does not increase overall system protection.