Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Tipton on November 09, 2004, 03:32:46 PM
-
Today my Avast virus defs were updated. Avast then found a virus in my Tuneup utilities 2004 folder. The file is part of the tuneup install, and has always been there. S ee screenshot! Last week Avast found a file in my Window Washer folder, and claimed it was a virus. It was nothing more than the auto update feature in WW, and is easily turned off in the program itself.
Any idea why Avast is flagging this file in my Tuneup folder??
Thanks
Tipton
-
Try scanning your PC with Trend Micro House call
http://housecall.trendmicro.com/
Disable the resident standard shield before running the online scan.
-
Try scanning your PC with Trend Micro House call
http://housecall.trendmicro.com/
Disable the resident standard shield before running the online scan.
Comes up clean with the Trend micro scan. Whats weird is I tried uploading it to scan at jotti. I got the following responce.
"The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file"
Tipton
-
I was easily able to upload the file on the KAV online scanner. KAV also gives me a clean bill of health. I really think the Avast team needs to re-think some of these virus detections. I don't want to start having to pick my software apart!
Tipton
-
Try scanning your PC with Trend Micro House call
http://housecall.trendmicro.com/
Disable the resident standard shield before running the online scan.
Comes up clean with the Trend micro scan. Whats weird is I tried uploading it to scan at jotti. I got the following responce.
"The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file"
Tipton
Sorry, it was Avast that was keeping the file from being up-loaded. I turned Avasts resident scanner off, and the file uploaded fine. Heres the jotti results!
Tipton
-
Seems to be a false alarm, sorry. We'll check it.
-
Seems to be a false alarm, sorry. We'll check it.
Igor, for me the same, a false positive of Win32:Torxy [Trj] into TUBasic.bpl :P
-
It's a proxy trojan :)
-
It's a proxy trojan :)
What do you mean?
-
The real thing is a proxy trojan, which means:
These Trojans function as a proxy server and provide anonymous access to the Internet from victim machines. Today these Trojans are very popular with spammers who always need additional machines for mass mailings. Virus coders will often include Trojan-proxies in Trojan packs and sell networks of infected machines to spammers.
The file identified by avast! as Win32:Torxy [Trj] is a FP
HTH
-
i have the same problem.
it's the second false positive detected by avast after the autoclk.exe file (in the windows directory) which seems to be created by my modem S@gem 800-840 installation.
-
I'm having the same problem. Avast keeps identifying TUBasic.bpl as a trojan, when I'm pretty sure it's clean. I've uninstalled and reinstalled the program (TuneUp), with a reboot, and Avast still thinks that file's a trojan.
-
Same here. It's now sitting in the chest waiting for your answer. Checked out clean everywhere else.
-
Seems to be a false alarm, sorry. We'll check it.
Igor, while you are at it, can you please check out the file that Avast flags as a virus from this thread.
http://forum.avast.com/index.php?board=2;action=display;threadid=8298
It too is a false positive in my opinion. It is part of Window washers auto check for updates, and is easily turned off in the program itself.
Tipton
-
Same here. It's now sitting in the chest waiting for your answer. Checked out clean everywhere else.
I found out what the file is for in the Tuneup program. Its for your right click tuneup shredder! If you move that file to the chest like you did Bob, your tune up shredder will no longer work. See my screenshot of the application failing to start. Also, I found out if you move it to the Avast virus chest, that the option to restore it is grayed out. See other screen shot!
Tipton
-
Oooops, heres my other screeny showing the application cannot start popup! Untill I can figure out how to restore the file, my tuneup shredder is broken.
Tipton
-
The restore option isn't not grayed out for me but, I want an answer first before I do that.
Also, I'm using Avast! Pro and don't know if that makes any difference.
-
The restore option isn't not grayed out for me but, I want an answer first before I do that.
Also, I'm using Avast! Pro and don't know if that makes any difference.
Well I wonder why mine is grayed out?? I may just have to do a quick iamge restore to get it back. Man I love imaging software! :)
I would still like to know why its grayed out for me though.
Tipton
-
I'm waiting for Alwil to come back and let us know what the status is on that file.
I use Norton GoBack and I love it. And have Ghost for my imaging program.
-
I'm waiting for Alwil to come back and let us know what the status is on that file.
I use Norton GoBack and I love it. And have Ghost for my imaging program.
I can already tell you that its a fasle positive. Avast is the only AV flagging it as a virus. Tuneup is a really popular software program. If it was indeed a virus, many of the online forums would be on fire with threads about it..
Heres a screenshot of what I get when I right click the file in the Avast virus chest. It says I can't restore it.
Tipton
-
Tipton
There are 3 differences between your Properties and mine.
1 date is different
2 I don't have a line that says that it can't be restored
3 my file type is 57
size and everything else is the same.
-
Hi Guys-
I'm not as skilled as some of you in diagnosing and figuring out problems with viruses, but I also have Tune-Up Utilities 2004, and ran into the same problem with my Avast home edition picking up two viruses-one in the 1-Click Maintenance program (the scanner for temporary files) and one in the Tune-Up shredder program today after Avast did its automatic update (also today).
What I did was I reinstalled Tune-Up from my Control Panel (since I also deleted the virus from the 1-Click Maintenance & Shredder and they wouldn't operate properly afterwards)...and kept rebooting my computer every time that alarming popup came up after I clicked on either 1-Click or the Tune-Up shredder. I didn't try to delete or repair the files (as noted in earlier posts, repair is not possible), so I would just close the warning window and reboot. After 3 to 4 reboots, the Avast! program stopped sending up the popup alarm, and everything on Tune-Up (so far) seems to be working properly (as well as my other programs). I think what may has happened was the resident scanner either figured out that it was sending false alarms or maybe it did take out some viruses doing the reboot process, I don't know. Hope this solution helps some of you until we get a a better explanation of what happened.
BTW-just a note...since I have installed the new MS Windows service pack 2 a couple of weeks ago, I've had to either reinstall or change settings on my spyware (Adaware), antivirus and Tune-Up Utilities...I hope there won't be too much more 'adjustment' down the road, hmm!
-
Tipton, what avast! is that? 4.1 or 4.5?
-
Avast is the only AV flagging it as a virus.
Wrong, Ewido Security Suite show's the same message.
Regards
housi
-
Thanks Alwil.
The last update corrected the false positive. I've restored the file and things are back to normal. If any one needs the file because they can't restore, let me know and I'll make it available for download. :)
-
Working here too...
Send files to Chest is a very good option 8)
-
HI!
I came up with this very same problem while running a boot scan this morning, I continued the scan onward because I had no intention of removing the trojan to the chest after failing to repair it. I was concerned about disabling a function in TuneUp and obviously the proof is in the pudding!! The question now is what course of action to take? Should I leave well enough alone, and what about the virus tool Avast provides is it of any help, I'm a novice user so any help is greatly appreciated!!
-
Tipton, what avast! is that? 4.1 or 4.5?
Its 4.1.
Tipton
-
OK. I think I fixed that "Cannot be restored" for avast! 4.5 (it's used when the source file is inside of an archive).
-
SCORPIONINBLUE
Read the Thread. The problem with the false positive has been fixed with the latest update.
VPS 0446-1
-
Igor 4.5 didn't have a problem with restore.
-
Thanks for fixing the problem you guys. I am back to normal, and my right click shredder in Tuneup works fine!
Tipton
-
Kewl-
The problem was fixed with the latest update...I'll go post this in the Microsoft Communities forum, there were a few posters there with the same problem...thanks!