Back to Forums








View Full Version : Virus in Avast files?


rik
January 30th, 2005, 19:52 PM
Obviously I run both NOD32 and Avast AV's and have had complete success in doing so...at least until today. Now NOD is finding a virus in an Avast file. Any ideas fellas? False positive maybe? Neither AV had been updated in the past few hours.

http://img154.exs.cx/img154/2896/virus9xb.jpg

FastGame
January 30th, 2005, 20:31 PM
Does Avast have those stored in its Virus Chest ? thats the only way Avast would have a virus...

False positive ? hmm wouldn't be the first time NOD32 did a FP, that comes with the territory of advanced heuristic scanners.

Find the file and let me know where you found it, for some reason I don't have "\Avast4.ini" in my "C:\Programs files\Alwil Software\Avast4\DATA\" path....

lynchknot
January 30th, 2005, 20:36 PM
I heard something like Avast does not encript their definitions (or something like that) so maybe nod is seeing it as a (fp) virus. I'm runnint nod now - see it I come up with same.

rik
January 30th, 2005, 20:40 PM
Now I get this when I try to run Avast...
http://img166.exs.cx/img166/6997/averror8dl.jpg

and I do have that file located in that path. There are 4 files in the chest but not that one...

[edit] oh BTW it's version 4.5 Build Nov2004 (4.5.561)

lynchknot
January 30th, 2005, 20:42 PM
Amon deleted that file. I took the file to Jotti's (http://virusscan.jotti.org/) and it's clean there.

rik
January 30th, 2005, 20:47 PM
I just tried to upload it at Jottis and got this: The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file.

lynchknot
January 30th, 2005, 20:54 PM
Try - http://www.virustotal.com/flash/index_en.html

http://img161.exs.cx/img161/2427/scan5lm.jpg

FastGame
January 30th, 2005, 20:59 PM
Well it must be a FP, maybe NOD32 got mad cuz they see everyone @wilders saying how good Avast is :p J/K they wouldn't do that..send it to NOD32 and they'll fix it in the next update.

I heard something like Avast does not encript their definitions (or something like that)
As far as I know the definitions are encrypted, I'll find out for sure ;)

BTW if you want a stand alone heuristic scanner that works great with Avast, Bitdefender Free is excellent.

lynchknot
January 30th, 2005, 21:03 PM
Well my nod did not find a virus or fp

rik
January 30th, 2005, 21:23 PM
Well, I'm uninstalling Avast. Already downloaded the free version again to reinstall it. We'll see what happens then.

Thanks guys.

Conan
January 30th, 2005, 23:00 PM
for some reason I don't have "\Avast4.ini" in my "C:\Programs files\Alwil Software\Avast4\DATA\" path....

I have one instance of that INI file.

FastGame
January 30th, 2005, 23:14 PM
I have one instance of that INI file.
I found mine, NOD32 had it :p



J/K ;)

Thats not a virus.

FastGame
January 31st, 2005, 14:33 PM
Ok Mr rik, I can't take the suspense any more, ?????

rik
January 31st, 2005, 14:51 PM
Well, I reinstalled the Avast yesterday afternoon and all has been running fine since. I dunno what actually happened, whether it was Nod or Avast, but it all seems to be working normal now.

lynchknot
February 1st, 2005, 17:37 PM
Am I the only one with two Ashley Simplesons in my Avast files? (don't give me no lip) :eek:

http://img178.exs.cx/img178/1295/ashley5yy.png

FastGame
February 1st, 2005, 17:52 PM
No your not, why do you ask such a question ?

I have two just like I'm suppose to :)

lynchknot
February 1st, 2005, 18:13 PM
I never noticed it before. I have never seen "2" run in taskmanager.

FastGame
February 1st, 2005, 18:20 PM
Two don't run in taskman, double click the icons and you'll see what they're for ;)

BTW just for safety, if you get bored don't go through your windows folders clicking icons to see what they do :p

This one time with Avast is ok.....do it :)

lynchknot
February 1st, 2005, 18:33 PM
Does nothing but show up in TM.

FastGame
February 1st, 2005, 18:39 PM
:confused: hmmm

One my scanner pops up in advance skin mode, the other my scanner pops up in Simple user mode.

rik
February 1st, 2005, 19:02 PM
doc, whenever I do this my scanner pops up...

(doctor) then don't do that.

lynchknot
February 1st, 2005, 19:32 PM
nothing pops up when I touch Ashley.**edit- I was wrong - delayed due to media running - this pops up - i've never seen this screen before

http://img144.exs.cx/img144/7627/ash3mu.jpg

cash_site
February 1st, 2005, 22:33 PM
LK, date of last scan: Not done yet?? :eek:

lynchknot
February 2nd, 2005, 17:43 PM
I reinstalled.

rik
February 3rd, 2005, 03:20 AM
I only have 1 listing...even after the reinstall.

lynchknot
February 3rd, 2005, 16:15 PM
I reinstalled after reimaging - did not have prior