Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: paddyc on December 03, 2009, 02:09:35 AM

Title: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: paddyc on December 03, 2009, 02:09:35 AM
Just loaded latest version of AVAST and it is suddenly telling me that a whole bunch of stuff contains the above Trojan.

Nexus is software that I have from a reliable financial institution and has been on my system for ages. There should be no problems with a spybot dll.

Looks like the latest software needs to be sorted out pronto.

Anyone else getting this type of message?
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Frasier on December 03, 2009, 02:12:14 AM
same problem here:
http://forum.avast.com/index.php?topic=51606.msg436749#msg436749

everything is a virus  :o
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: cadremis on December 03, 2009, 02:19:00 AM
Same situation with me in my 2 computers, everything is a virus, my memory is infected and everything in my computer is going to quarentine.... what do we do....
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: arggem on December 03, 2009, 02:26:09 AM
Ditto. With Spybot, Skype and Copernic desktop search.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Paul1149 on December 03, 2009, 02:26:56 AM
Suddenly I'm having the same problem. A dynamic IP updater, my hotkeyz shortcut utility, taskbarshuffle.... all supposedly are infected. I guess it's possible that this occurred, but it's doubtful. I think I'm going to do an online scan with another anti-virus to compare.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: lee5768 on December 03, 2009, 02:40:05 AM
same here even flags spybot as Win32:Delf-MZG before its even downloaded


also today done my laptop with a fresh install that's flagging Win32:Delf-MZG too


flagging everything up as it on my proper rig i had to remove avast in the end


this is the slowest forum i have ever been on too...... nightmare lol




Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Frasier on December 03, 2009, 02:49:08 AM
It is slow, because quite a lot of people want to know what is going on. I wonder what Avat team is doing now. Hope that not sleeping... They should disable the last update, post the message on forum, as well as on the website etc. Heh, if you are still running Avast, try to download any exe file i.e. from here:
http://cdburnerxp.se/en/download - few alarms guaranteed.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: jayembee on December 03, 2009, 03:01:31 AM
Count me in, too. After installing update 091203-0 a little earlier, I am getting a warning "Win32:Delf-MZG [Trj]" triggered by advcheck.dll and when attepting to launch Spybot. I sent a false positive report. Would be a nice feature if Avast then disengaged after I sent that report so that I could run Spybot and update, but no. Very irritating.   >:(

It took almost an hour to post this. The forum kept timing out. Pfft!

OS - Win98SE
Spybot - 1.6.5.2
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: lee5768 on December 03, 2009, 03:16:03 AM
well 2 things are quite obvious

firstly
avast needs to be more careful with its updates and peoples data. I have no doubt their are lots of people who have selected delete
this file from my system and have now got non working programs or errors in the OS due to missing files
I myself sent a few items to the vault and have had to remove avast due to the amount of flags I was getting
until I worked out this isn't right to many items are infected




secondly
is really needs to improve its forums...when something goes wrong they can't take the load
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Fred S on December 03, 2009, 03:22:38 AM
You can add WinSecrets.exe and Glary Utilities to the ....MZG trojan alers!

Does anyone know what is going on??
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: geerja on December 03, 2009, 03:46:44 AM
Add TugZip, PrimoPDF and Skype to the "infected list as well".

Good thing I did some research and landed here, before taking drastic measures!

I got two Avast database updates today, which I found a bit strange. Never seen that happen before.

I have scheduled a boot time scan. I can't wait to see what's going to happen...  ;D
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: blinka on December 03, 2009, 03:55:09 AM
Avast has today reported my screensaver which is virus free and a .scr file as a virus, i thought it was weird, so i clicked on the button for avast to not do anything and it blocked my screensaver...
And like half an hour avast detected a new virus, it was the KMplayer, which is not a virus, it's just a .mpg, .avi, player... it's just a movie player! and the weirdest thing is that i've had it since i got the computer and today avast decided it was a virus so it blocked it, i unninstalled it then and installed it again, but guess what avast kept on saying it was a virus... and instead of clicking on "dont do anything" i simply closed the alert window, but it still got blocked and now i can't seem to install it again....
I'm from Argentina, so i guess this is a worldwide thing...
Hope they fix it soon, as for now i've deactivated avast...
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Phr3d on December 03, 2009, 04:25:15 AM
well everyone following security has heard/anticipated that avast was gonna get hit hard due to their popularity, guess it's time.

add anyDVD to the instant virus, cannot be loaded-thank gawd I decided to look around before I killed a program that I have used for six months (more, actually) due to my anti-virus software becoming a virus.  The backlash from this will be superlative-word-of-your-choice, I'll try catastrophic.  Mom & Dad are just gonna vault everything that comes up suddenly virus, pity them their next reboot, no spybot/teatimer, THAT is for certain.

Bitdefender has a nice special price that I was already debating since avast missed malware and led me to bleeping computer to fix it (bitdefender on-line scan is the final check).  Sorry, I wanna be faithful and all, but if my kids had destroyed all of our computers following avast's recommended action I'd be in deep drek.

I'm thinking corporate espionage or a bigger problem than we are all aware of yet - there is just no simple explanation of an error of this magnitude.

regardless, it is a truly sad day at our house.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Paul1149 on December 03, 2009, 05:14:09 AM
It's official. Trend, after a 2.5 hr scan, detected none of these problems. Methinks they're false positives.

Blessings,
Paul
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: -Genesis- on December 03, 2009, 05:46:12 AM
Me here too!!!

My Internet Cafe client got this message Win32:Delf-MZG!!!!

Ive been using avast with Internet Cafe client for 5 months but never ever got a viruses popping-up.
But today all my computer getting this Win32:Delf-MZG!!!!..

I have no choice but to un-install because no one can use our Internet Cafe.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Doctor Memory on December 03, 2009, 05:50:38 AM
 I have home and I am on XP Pro SP2 with all the patches to current. Mine thinks PSPad is a virus along with Glary Utilities. In PSPad the majority of the false positives are in DLLs. Although it did say the PSPad.exe was a virus as well (presumably because it calls the DLLs). So much was coming up with "Win32:Delf-MZG trojan" that I am reluctantly turning it off.
 To do so I went into services by left clicking the start button -> choosing "run" -> and then typing "services.msc" then click "Ok". Once in there I set everything with the Avast! name to disabled. If you do that you will get a pop up asking if it is ok to do so. Make sure you know what you are doing. I then went into start -> run -> (then type) msconfig (click "Ok") -> then click on the tab labeled "startup" I then and unchecked ashDisp the command portion should be ashDisp.exe where you installed Avast!. I am about to restart and be VERY careful until a fix is posted...
 They need to make an announcement and get a fix out pronto. They also need to update their forum. I can't count the number of timeouts I got trying to get on to add this info.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: lpg_unit on December 03, 2009, 05:55:59 AM
Yep, as it turns out, Avast is doing it wrong:

http://www.virustotal.com/analisis/23da9d328d176b73cabc2617edee989f5d3e729ef67dfa1de84cdb0fb56223fd-1256742321

Scanned several files, and it seems as though the definitions have caused the AV to go loco and flag Delphi-written code as crap.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: AshAU on December 03, 2009, 08:13:33 AM
"well everyone following security has heard/anticipated that avast was gonna get hit hard due to their popularity, guess it's time."

Who is "everyone"? Very few who have a real idea about the subject at hand would suggest such a thing.
The company knows the user base numbers and adjusts staffing and support levels. You don't think they know IP's and traffic numbers for definition downloads? I would think they can tell you active monthly user levels within 10k or so.

"The backlash from this will be superlative-word-of-your-choice, I'll try catastrophic.  Mom & Dad are just gonna vault everything that comes up suddenly virus, pity them their next reboot, no spybot/teatimer, THAT is for certain."

This sort of situation is not unusual and talking it up is silly. Yes, it's not good but it also happens quite often with most products and at some stage you can bet all of them have the same issues. Try dealing with some of the other companies on a commercial level....

"Bitdefender has a nice special price that I was already debating since avast missed malware and led me to bleeping computer to fix it (bitdefender on-line scan is the final check).  Sorry, I wanna be faithful and all, but if my kids had destroyed all of our computers following avast's recommended action I'd be in deep drek."

Expecting an AV program to pick up most or all Malware shows a total lack of knowledge. You need a three tier protection method and all of them will over lap (FW, AV, malware). What would your kids be doing unsupervised on the pc and why would they not simply call you and ask about the problem? Why would you be in "drek"? No backup plans in place?

"I'm thinking corporate espionage or a bigger problem than we are all aware of yet - there is just no simple explanation of an error of this magnitude."

I'm thinking that it's often better to learn more about a subject than post ;) It's a mistake, most of the companies have had them on a similar level in one form or another. I deal with many AV companies to resolve issues like this, often. It's not that usual to have it on this scale BUT it DOES happen.


No real idea why this is such a big problem for most of you. It was reasonably clear there was a problem, pause or stop the program, google and check with something else. We find in this case there is a issue so we simply wait some hours for a fixed update. We can still work and play, your system should still have two tiers of protection left and at most you don't take risks while online.


"regardless, it is a truly sad day at our house"

Send me your address and I will post a big box of tissues for you.


We do need to be clear, this should NOT have happpened but this is far from the worst supported or most likely programs to have issues like this. It should be fixed within a few hours and is not likely to happen again for some time.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: DemonI81 on December 03, 2009, 05:30:57 PM
"We do need to be clear, this should NOT have happpened but this is far from the worst supported or most likely programs to have issues like this. It should be fixed within a few hours and is not likely to happen again for some time."

You're right, this should NOT have happened. You may also be right on your other points, but the fact is, Avast dropped the ball in a big way. I new 90% of my programs didn't get infected right after an Avast update so I uninstalled and installed AVG again. Did a scan and it was good.
Today I googled the supposed virus and found this thread.

Honestly Avast, this is inexcusable. As many have said, the people that are not tech savvy could have been really damaged by this. As I said, I uninstalled your program immediately and it's going to stay that way. If you can't even put out a proper definition update I want you nowhere near my PC.
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: Chris Thomas on December 03, 2009, 07:12:57 PM
Can this be the biggest blunder by a security software provider?

I am doing a research about it
 >:( >:( >:(
Title: Re: AVAST thinks that Nexus.exe and spybot dll contain Win32:Delf-MZG trojan
Post by: DavidR on December 03, 2009, 07:55:06 PM
Not by a long way - Don't waste your time they, the major AVs have all had big issues and many much worse than this. One I recall from memory was AVG which deleted a number of system files rendering the computer unbootable I believe.