Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: tinny on May 29, 2006, 05:37:41 PM

Title: Problem between Avast and Tencent QQ
Post by: tinny on May 29, 2006, 05:37:41 PM
hi, i'm using avast 4.7 home edition, it is a great anti-virus software, my friends and i love it.
but when i update the VPS to the latest version(0529), i find some problems.

Tencent QQ is an IM software in China, it has a huge numbers of users in China, but when i tried to login QQ, the avast told me that the QQ contains Win32:Delf-AHY [Trj]

Can we solve the problem? the VPS of 0526 didn't decect the Win32:Delf-AHY [Trj] in QQ login program.

My Email is tinnyliu at gmail dot com, plz contact me if possible.

Best Regards~
Title: Re: Problem between Avast and Tencent QQ
Post by: igor on May 29, 2006, 05:53:16 PM
Please pack the detected executable with ZIP or RAR, protect it with some password and send it to virus@avast.com, e.g. with "False alarm" subject.
Thanks.
Title: Re: Problem between Avast and Tencent QQ
Post by: DavidR on May 29, 2006, 06:33:58 PM
Quote from: tinny
hi, i'm using avast 4.7 home edition, it is a great anti-virus software, my friends and i love it.
but when i update the VPS to the latest version(0529), i find some problems.
Are you sure you have the latest version of VPS, the latest version is 0622-1 dated 29/05/2006, Win32:Delf-AHY [Trj] and a number of other Win32:Delf- Trojans were added in this VPS update.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/xhtml/index_en.html)

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives (http://forum.avast.com/index.php?board=2;action=display;threadid=7779)
Title: Re: Problem between Avast and Tencent QQ
Post by: tinny on May 29, 2006, 06:40:09 PM
hello, i have sent the email, hope can solve the problem quickly :-)
Title: Re: Problem between Avast and Tencent QQ
Post by: tinny on May 29, 2006, 06:58:52 PM
Quote from: tinny
hi, i'm using avast 4.7 home edition, it is a great anti-virus software, my friends and i love it.
but when i update the VPS to the latest version(0529), i find some problems.
Are you sure you have the latest version of VPS, the latest version is 0622-1 dated 29/05/2006, Win32:Delf-AHY [Trj] and a number of other Win32:Delf- Trojans were added in this VPS update.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/xhtml/index_en.html)

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives (http://forum.avast.com/index.php?board=2;action=display;threadid=7779)

i tried the VirusTotal and the result is at the follows, now i have added the "false positive" file into exclusions. but i do advise the avast should solve the problem, because QQ in China has a big market, and the free home edition of avast is attractive for Chinese users!

Quote
Antivirus   Version   Update   Result
AntiVir   6.34.1.34   05.29.2006   no virus found
Authentium   4.93.8   05.28.2006   no virus found
Avast   4.6.695.0   05.29.2006   Win32:Delf-AHY
AVG   386   05.29.2006   no virus found
BitDefender   7.2   05.29.2006   no virus found
CAT-QuickHeal   8.00   05.29.2006   no virus found
ClamAV   devel-20060426   05.29.2006   no virus found
DrWeb   4.33   05.29.2006   no virus found
eTrust-InoculateIT   23.72.21   05.29.2006   no virus found
eTrust-Vet   12.6.2232   05.29.2006   no virus found
Ewido   3.5   05.29.2006   no virus found
Fortinet   2.77.0.0   05.29.2006   no virus found
F-Prot   3.16f   05.29.2006   no virus found
Ikarus   0.2.65.0   05.29.2006   no virus found
Kaspersky   4.0.2.24   05.29.2006   no virus found
McAfee   4772   05.29.2006   no virus found
Microsoft   1.1441   05.29.2006   no virus found
NOD32v2   1.1565   05.29.2006   no virus found
Norman   5.90.17   05.29.2006   no virus found
Panda   9.0.0.4   05.29.2006   no virus found
Sophos   4.05.0   05.29.2006   no virus found
Symantec   8.0   05.29.2006   no virus found
TheHacker   5.9.8.150   05.29.2006   no virus found

Aditional Information
File size: 376832 bytes
MD5: 2b0f3b23de3b9c906bf76f9dd1276197
SHA1: d078efef723ea559510c11b9b39027262d80e759
Title: Re: Problem between Avast and Tencent QQ
Post by: tinny on May 29, 2006, 07:07:01 PM
Are you sure you have the latest version of VPS, the latest version is 0622-1 dated 29/05/2006, Win32:Delf-AHY [Trj] and a number of other Win32:Delf- Trojans were added in this VPS update.

Yes, i am sure i am using this version of VPS.
Title: Re: Problem between Avast and Tencent QQ
Post by: crossxzy on May 29, 2006, 08:00:09 PM
I am using avast!4.7Pro.I got the same problem,too.
Title: Re: Problem between Avast and Tencent QQ
Post by: DavidR on May 29, 2006, 08:18:38 PM
Quote from: tinny
tried the VirusTotal and the result is at the follows, now i have added the "false positive" file into exclusions. but i do advise the avast should solve the problem, because QQ in China has a big market, and the free home edition of avast is attractive for Chinese users!

They will examine the file you sent and as necessary amend the signatures and update the VPS. The exclusions is a temporary measure so that you can continue to use Tencent QQ until this happens, which hopefully shouldn't be long.
Title: Re: Problem between Avast and Tencent QQ
Post by: xandh on May 31, 2006, 06:08:36 AM
i and my friend using the home version(the latest version of VPS), we  got the same problem, help!
Title: Re: Problem between Avast and Tencent QQ
Post by: xandh on May 31, 2006, 10:34:44 AM
Update you VPS , the 0622-2 solved this problem!
Title: Re: Problem between Avast and Tencent QQ
Post by: tinny on May 31, 2006, 06:32:54 PM
happy to find that the VPS public at 0531 had solved the problem.
thanks for avast's great job!