Author Topic: TONS OF NEW ALARMS (Read 14220 times)

Steele · « **on:** March 11, 2004, 04:03:25 AM »

Why am I getting all of these virus alarms today!??

They were never here before! After a new update and a manual scan today...I get all these viruses?? I just scanned my system yesterday.

Half of them are from when I visted ebay?

There are still MORE viruses after todays update? These files have been on my PC before...weeks and weeks before and avast has never detected anything? I suspect there is something wrong and I don't think ANY of these files are in fact infected.

What's going on??

Steele

Steele · « **Reply #1 on:** March 11, 2004, 04:47:44 AM »

Wow! Here are some more!

I think these are false positives.... how could they ALL appear out of the blue? I think todays update of the defininition file has caused perhaps a few false positives?

Does Avast4Home HATE ebay??? ???lol

I'll send these files into Avast.

JEfromCanada · « **Reply #2 on:** March 11, 2004, 05:32:50 AM »

Quote from: Steele on March 11, 2004, 04:47:44 AM

I think these are false positives.... how could they ALL appear out of the blue? I think todays update of the defininition file has caused perhaps a few false positives?

I'm pretty sure you're right about the false positives. This is the first time avast has EVER signalled a problem on my machine. And it was with a two-year old file!

gardenwife · « **Reply #3 on:** March 11, 2004, 06:14:49 AM »

Same thing here. I'm a brand-spankin'-new user, though, so I didn't know what to think. Glad I'm not the only one.

SKYCOMP · « **Reply #4 on:** March 11, 2004, 07:53:36 AM »

Hello Gardenwife, hopefully someone will be along to address your concerns. I wouldn't lose any sleep over Malware, if in fact they turn out to be a problem. Its a simple solution to either pass them over or give them the boot. Adaware does an excellent job at cleaning up those bugs & is a very nice partner in tantum with Avast! And don't be too alarmed if your words go unheeded for awhile. Avast! found 2 trojan files supposedly on my machine recently, probably leftovers from an earlier owner of this box. I posted my concern & was met with a suggestion to Look Them Up on the Boardsearch that returned nothing defining these 2 Finds. So i just boxed them up in a seperate Folder for my own research. Case closed. Its comforting that Avast! can pick out even the leftovers from a malicious program.

gardenwife · « **Reply #5 on:** March 11, 2004, 08:01:25 AM »

Hi, Skycomp - Thanks for the reply. I just deleted the three eBay HTML files from my temp directory since they wouldn't have any bearing on other stuff.

I also noticed it put 3 system files in the chest, but when I scanned them, it said they were fine. They'd just been copied into the chest, evidently, because when I tried to restore them, it asked if I wanted to copy over the destination files. I told it no.

Lisandro · « **Reply #6 on:** March 11, 2004, 12:47:32 PM »

False positives!

Please, avast! team see this 403-6 VPS file!

Pavel Baudis · « **Reply #7 on:** March 11, 2004, 01:48:50 PM »

Quote from: Technical on March 11, 2004, 12:47:32 PM

False positives!

Please, avast! team see this 403-6 VPS file!

We are working on it right now - another set of Trojan-gens has been added last night. While most of the alarms are real one, there are two false alarms. We will remove them and release the update today (together with the FP reported from you)..

Pavel

RejZoR · « **Reply #8 on:** March 11, 2004, 02:26:09 PM »

Its easy to test for false positives. Disable avast! Resident Shield,extract FP suspected file and check it with at least two other antivirus programs/online services to confirm suspicion. If both other give positive result than its not FP. Simple.

Lisandro · « **Reply #9 on:** March 11, 2004, 02:44:19 PM »

Quote from: RejZoR on March 11, 2004, 02:26:09 PM

Its easy to test for false positives. Disable avast! Resident Shield,extract FP suspected file and check it with at least two other antivirus programs/online services to confirm suspicion. If both other give positive result than its not FP. Simple.

RejZor, I copied the files in a floppy and test them against AVG, Norton and TrendMicro on-line...
I'm sure that my Auto-It files (posted in the virus board) are false positives... I cannot work with my computer untill I have a new VPS :'(

RejZoR · « **Reply #10 on:** March 11, 2004, 02:59:00 PM »

Well Technical,its a bit different in your case,because you are 100% sure that those files are virus free (because you made them)

JEfromCanada · « **Reply #11 on:** March 11, 2004, 04:04:25 PM »

Quote from: RejZoR on March 11, 2004, 02:59:00 PM

Well Technical,its a bit different in your case,because you are 100% sure that those files are virus free (because you made them)

I think that when files that have been on your PC for a long time (whether you authored them yourself or not) all of a sudden turn up as positive for viruses/trojans, that can mean only one of two things. The most likely is a false positive reading. But the second, I suppose, is a newly discovered (by whitehats) vulnerability that's been in the field for a very long time.

That second scenario is not as likely, but I guess possible. An example of this might be the technical flaw discovered in the unix compression algorithm. If you had created a program using one of the flawed libraries, then a new version of a virus scanner might flag your program as compromised - even if you had been using the same, unmodified component for years.

I also suppose that some benign feature in an application which PREVIOUSLY was not dangerous could become dangerous if an update was made to the underlying operating system that facilitated the ability of an older program to cause havoc.

Too much to consider. I just want my feeling of security back!

spiketoo · « **Reply #12 on:** March 11, 2004, 05:47:11 PM »

I believe I also am getting false positives on files over a year old. I am still getting them with VPS 0403-7.

LAB · « **Reply #13 on:** March 11, 2004, 06:00:48 PM »

Because we are on the topic of false positives and since I have never received any warnings of a suspicious file, I wanted to ask if a file is moved to the virus chest and later found out that it is not a virus, how do you restore the file to its original location?

spiketoo · « **Reply #14 on:** March 11, 2004, 06:02:41 PM »

Quote from: cochise1 on March 11, 2004, 06:00:48 PM

Because we are on the topic of false positives and since I have never received any warnings of a suspicious file, I wanted to ask if a file is moved to the virus chest and later found out that it is not a virus, how do you restore the file to its original location?

Thats a real good question becuase I moved two files to the 'moved' folder and now I cannot even copy them to send to Avast, nor move them anywhere.