Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Luz on February 08, 2007, 07:41:20 PM

Title: xdcc server iroffer
Post by: Luz on February 08, 2007, 07:41:20 PM
I'm using an irc xdcc server named iroffer on my pc (i guess Win32:Iroffer-015 [Trj] for you...).

I haven't run it for awhile but today, i need it and i can't us it.

Until today, i always shutdown avast, run iroffer and then restart avast but today, avast stop completely iroffer, no connexion to the irc server and time out if I restart avast after the connexion.

have you got a solution ?


Thank

sorry for my english...
Title: Re: xdcc server iroffer
Post by: DavidR on February 08, 2007, 08:55:13 PM
There has been quite a large signature update recently, this may be the reason for it just being detected.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/xhtml/index_en.html) Or Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. You can't do this with the file in the chest, you will need to move it out.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.
Also see (Mini Sticky) False Positives (http://forum.avast.com/index.php?board=2;action=display;threadid=7779), how to report it to avast! and what to do to exclude them until the problem is corrected.
Title: Re: xdcc server iroffer
Post by: igor on February 10, 2007, 01:29:14 PM
Strange, avast! shouldn't block the connections even if the executable itself is detected as malicious (correctly or not).
Does it help if you just stop some of avast! resident providers? (if yes, which ones?)