« previous next »
Pages: [1]   Go Down

Author Topic: Probably a false positive  (Read 5468 times)

0 Members and 1 Guest are viewing this topic.

arnous

  • Guest
Probably a false positive
« on: April 18, 2005, 11:43:00 PM »
Hi all,

while trying to download the SQLSlammer fix, i've got an alert from avast : the file is infected by worm Win32:SQLSlammer... how is it possible?  ;D

here is a link to the file http://securityresponse.symantec.com/avcenter/FixSQLex.exe

thanx
Logged

kamulko

  • Guest
Re: Probably a false positive
« Reply #1 on: April 18, 2005, 11:47:28 PM »
Avast! put it in the virus chest or it have interrupted your connection? (it depends from your settings)
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Probably a false positive
« Reply #2 on: April 18, 2005, 11:48:28 PM »
Probably a false positive... Are you using the last VPS file (0516-0)?
Logged
The best things in life are free.

arnous

  • Guest
Re: Probably a false positive
« Reply #3 on: April 18, 2005, 11:50:45 PM »
Hi,

thanx for your reply,

i've the latest definitions 0516-0 and avast interrupted the connection (WebShield ON)

is it the same for you?
Logged

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11863
    • AVAST Software
Re: Probably a false positive
« Reply #4 on: April 18, 2005, 11:53:26 PM »
Well, it doesn't sound like a real false alarm, I'd rather guess on incorrectly encrypted virus sample.
Logged

kamulko

  • Guest
Re: Probably a false positive
« Reply #5 on: April 18, 2005, 11:55:41 PM »
please, 1 minute of patience: now I try to download the same file and see the Avast! response...
Logged

kamulko

  • Guest
Re: Probably a false positive
« Reply #6 on: April 18, 2005, 11:58:29 PM »
Yes! Avast! says the same alarm... but it don't lock the connection (using firefox and webshiel enabled). Technical he's right.  ;D
Logged

arnous

  • Guest
Re: Probably a false positive
« Reply #7 on: April 19, 2005, 12:00:29 AM »
firefox for me too... but fc barcelona is the best  ;)
Logged

kamulko

  • Guest
Re: Probably a false positive
« Reply #8 on: April 19, 2005, 12:02:07 AM »
 ;D
Logged

arnous

  • Guest
Re: Probably a false positive
« Reply #9 on: April 19, 2005, 12:30:16 AM »
Oups! i missed this one!!

Quote from: igor on April 18, 2005, 11:53:26 PM
Well, it doesn't sound like a real false alarm, I'd rather guess on incorrectly encrypted virus sample.


what will be the solution? a VPS update?

thanx
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Probably a false positive
« Reply #10 on: April 19, 2005, 01:21:36 AM »
Quote from: Anas on April 19, 2005, 12:30:16 AM
Oups! i missed this one!!

Quote from: igor on April 18, 2005, 11:53:26 PM
Well, it doesn't sound like a real false alarm, I'd rather guess on incorrectly encrypted virus sample.

what will be the solution? a VPS update?

No, if Igor is correct (and he used to be  ;D) it's a problem of Symantec wrong encryting a virus sample... Like Panda antivirus  :P :( >:(
Logged
The best things in life are free.

arnous

  • Guest
Re: Probably a false positive
« Reply #11 on: April 19, 2005, 01:37:03 AM »
 :D thanx Technical and Igor too
Logged
Pages: [1]   Go Up
« previous next »