Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: graywolf3878 on August 23, 2015, 01:34:25 PM

Title: Avast Free just flagged 2 Firefox 39 dll files
Post by: graywolf3878 on August 23, 2015, 01:34:25 PM

I started up Firefox this morning and Avast sent 2 files to the quarantine chest. One was FirefoxCtype.dll (flagged as win32:BHO-AOG trojan), and npFirefoxplugin.dll (flagged as win32:Conduit-O trojan). Firefox seems to be running ok afterwards. Has this happened to anyone else?

I have FF auto updates off so I'm still on 39 (and from the posts I saw about 40 and the upcoming 41 on here I'm glad I haven't upgraded yet).

Edit: I can't access the site GIFSound.com now. Not sure it it's because of Avast or FF. It's a safe site.

Title: Re: Avast Free just flagged 2 Firefox 39 dll files
Post by: Pondus on August 23, 2015, 04:32:02 PM

Quote

Edit: I can't access the site GIFSound.com now. Not sure it it's because of Avast or FF. It's a safe site.

There are no safe sites, safe today can be hacked tomorrow

I get not available from android. See pic in top righ corner here (click it for big pic)  http://urlquery.net/report.php?id=1440340180068

Title: Re: Avast Free just flagged 2 Firefox 39 dll files
Post by: Pondus on August 23, 2015, 04:40:34 PM

This is just a name search so may not be correct. For correct result you need to upload and test your file (s)
If tested before, click rescan for a fresh result


FirefoxCtype.dll
https://www.virustotal.com/en/file/beb9b6863a2e3df49ae96e9e05910915aec69f9433b3dcdb1a56965bfa81094e/analysis/

npFirefoxplugin.dll
https://www.virustotal.com/en/file/2e4118f281f131b02759a56eb298afee18f08b8c1cb94317f0ef001bb7d614de/analysis/

Title: Re: Avast Free just flagged 2 Firefox 39 dll files
Post by: graywolf3878 on August 24, 2015, 04:39:13 AM

I submitted them shortly after it happened. I just scanned the 2 files again while in the quarantine chest and now they're listed as PUP's instead of trojans.  And that website is working now (might have been their site).