Author Topic: Win32:Bifrose-EGW [Trj]  (Read 24647 times)

0 Members and 1 Guest are viewing this topic.

Offline Snagglegrain

  • Sr. Member
  • ****
  • Posts: 221
Re: Win32:Bifrose-EGW [Trj]
« Reply #30 on: July 25, 2009, 12:46:39 AM »
A similar detection for me as well, posted here in error... a Windows Installer file named c415ae.msp infected with Win32:Bifrose-EGW[Trj]

hlecter

  • Guest
Re: Win32:Bifrose-EGW [Trj]
« Reply #31 on: July 25, 2009, 01:00:00 AM »
A similar detection for me as well, posted here in error... a Windows Installer file named c415ae.msp infected with Win32:Bifrose-EGW[Trj]


Looks like the answer is in the thread you originally posted in, too:

http://forum.avast.com/index.php?topic=47074.0

The crossposting is fulfilled.  :)

HL
« Last Edit: July 25, 2009, 01:01:51 AM by hlecter »

nickpc

  • Guest
Re: Win32:Bifrose-EGW [Trj]
« Reply #32 on: July 25, 2009, 03:39:23 AM »
Apologies in advance, I'm new to this forum and found my way here after Googling "Win32:Bifrose-EGW [Trj]"
When I spotted this same detection I also noticed a popup about Mozy doing a version update on my system.

Probably completely conincidental but I thought I'd mention it.

glane5910

  • Guest
Re: Win32:Bifrose-EGW [Trj]
« Reply #33 on: July 25, 2009, 03:55:27 AM »
I just came up with the same warning today. I ran malwarebytes which showed no infection. I went ahead and ignored the warning and reported it as a possible false positive.

rji

  • Guest
Re: Win32:Bifrose-EGW [Trj]
« Reply #34 on: July 25, 2009, 12:12:48 PM »
Hi,

I'm new here with my very first posting on any of Avast forums and couldn't help notice that apparently I have joined those with the Win32:Bifrose-EGW[Trj] infection as well.

I did my weekly standard virus scan awhile ago and it was detected in the 313a5f.msp file. size of file shows it as 6.96 MB

It's in the virus chest now. What do I do now? Just leave it there? Send it to Avast? Delete It?

Will it affect my computer in any way?

As I said, I'm new here and any inf/help/suggestions is certainly appreciated!  :)

hlecter

  • Guest
Re: Win32:Bifrose-EGW [Trj]
« Reply #35 on: July 25, 2009, 12:34:52 PM »
It's highly possible a False Positive that will be corrected in the next VPS-update.

Whatever you do, don't delete the file.

You can scan it in the Chest after new VPS-update to be sure.

As long as it stays in Chest it can't do any harm.

HL

Offline Fallen-Parts

  • Newbie
  • *
  • Posts: 9
Re: Win32:Bifrose-EGW [Trj]
« Reply #36 on: July 25, 2009, 04:15:07 PM »
Today I too gotten the same thing: c:Windows\Installer\735BF5.msp
I just turned on my computer and then the internet as I was waiting for it to connect was playing spider solitaire. So I wasn't actually downloading anything or doing anything out of the ordinary. Although this file did appear to have had last change 3/28/2006. I still moved it into chest first so I could be sure this was really a false positive alert.

From what it appears with so many people getting the same file different version per say looks like this is another false positive alert. Although I couldn't email it to avast from the chest or at list I don't think it went through. That was actually my first time doing that.

I can say that I did a windows update on the 21st a few days ago but again it appears to have been on my computer since 2006. Like others have said.

I've only had two false alerts since I have been using avast over 4 years now so that is pretty good in my book. All of which I was able to send into chest except for my email issue I just had to wait for an update vd and then I was able to get into it.

I will sit and wait before doing anything. Love having that chest because I don't have to worry about what to do.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: Win32:Bifrose-EGW [Trj]
« Reply #37 on: July 25, 2009, 04:23:22 PM »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Snagglegrain

  • Sr. Member
  • ****
  • Posts: 221
Re: Win32:Bifrose-EGW [Trj]
« Reply #38 on: July 25, 2009, 06:26:30 PM »
Although I couldn't email it to avast from the chest or at list I don't think it went through. That was actually my first time doing that.
I encountered something quite similar, as I noted here...
Quote
I also noticed that when I tried to email the file to avast from the Chest (by clicking the email icon on the toolbar), nothing happened... that is, the Submit file dialog did not appear.    It does appear for other files in the Chest.  Any ideas?
Do you get the Submit file dialog when you highlight this particular file (735BF5.msp) and then click the email icon?  I did not, but as stated above, I get the dialog when highlighting every other file in the chest and clicking the email icon.


Offline Fallen-Parts

  • Newbie
  • *
  • Posts: 9
Re: Win32:Bifrose-EGW [Trj]
« Reply #39 on: July 25, 2009, 08:17:14 PM »
Do you get the Submit file dialog when you highlight this particular file (735BF5.msp) and then click the email icon?  I did not, but as stated above, I get the dialog when highlighting every other file in the chest and clicking the email icon.

Like you I did not get the submit file on that particular file. And like you the others in there I did. Not sure why that is but it is. lol. I'm just waiting for Avast to update again with the definitions so it would be fix as it's like many others have said.



Offline Fallen-Parts

  • Newbie
  • *
  • Posts: 9
Re: Win32:Bifrose-EGW [Trj]
« Reply #40 on: July 25, 2009, 08:18:06 PM »
See http://forum.avast.com/index.php?topic=47074.msg396483#msg396483, should be fixed on VPS 090725-0.

Thanks David this is what I figured.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: Win32:Bifrose-EGW [Trj]
« Reply #41 on: July 25, 2009, 10:01:45 PM »
That VPS Update has been released now so if you ensure you have it and scan those files again.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Snagglegrain

  • Sr. Member
  • ****
  • Posts: 221
Re: Win32:Bifrose-EGW [Trj]
« Reply #42 on: July 25, 2009, 10:37:43 PM »
Sure enough, the update fixed my c415ae.msp false positive.  :)

Offline Fallen-Parts

  • Newbie
  • *
  • Posts: 9
Re: Win32:Bifrose-EGW [Trj]
« Reply #43 on: July 25, 2009, 10:44:39 PM »
That VPS Update has been released now so if you ensure you have it and scan those files again.

I just updated and went into the chest section and scanned. No Virus. So I did restore it and it states successfully but when I checked chest again it's still there. Shouldn't it have delete it out of chest?

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: Win32:Bifrose-EGW [Trj]
« Reply #44 on: July 25, 2009, 11:46:30 PM »
A copy remains in the chest, confirm that the file has been copied back to the original location and if so delete the copy in the chest.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security