Author Topic: false positive? nutcracker family FC6  (Read 5723 times)

0 Members and 1 Guest are viewing this topic.

sdowney717

  • Guest
false positive? nutcracker family FC6
« on: January 19, 2007, 02:44:03 PM »
I am running FC6
Avast finds a 'virus' which according to Fedora Redhat is a false positive.
found in
usr/share/locale/pa/LC_MESSAGES/redhat-artwork.no/PartNo_0#860842075

which if you try to move to chest, kills the virus scanner. I assume this file is important to the linux os.

Do you know anything about this?

thanks

reference is here!
http://www.fedoraforum.org/forum/showthread.php?p=577427
http://www.linuxquestions.org/questions//showthread.php?t=513548

sdowney717

  • Guest
Re: false positive? nutcracker family FC6
« Reply #1 on: January 19, 2007, 05:54:39 PM »
these are the contents of avast-update in usr/bin

#!/bin/sh
#
# Updates avast! virus database. For use from cron table.
#

AVASTDIR=$HOME/.avast
VPSFILE=$AVASTDIR/400.vps
URL_UPDATE="http://files.avast.com/files/latest/400.vps"
URL_UPDATE_MD5="http://files.avast.com/files/latest/400vps.md5"

if test ! -d $AVASTDIR ; then
    echo "You have to run avast! at least once before you can update it." >&2
    exit 1
fi

if test -f $AVASTDIR/lockfile-$USER ; then
    echo "avast! is running, can't update." >&2
    exit 1
fi

if test -f $VPSFILE ; then
    md5_current=`md5sum $VPSFILE | cut -c1-32`
fi

file_md5=$VPSFILE.new.md5
wget -q -O $file_md5 $URL_UPDATE_MD5 && md5_update=`cat $file_md5 | cut -c1-32`
rm -f $file_md5

if test "x$md5_current" != "x$md5_update" ; then
    wget -q  -O $VPSFILE.new.$$ $URL_UPDATE && mv -f $VPSFILE.new.$$ $VPSFILE
fi

Offline zilog

  • Avast team
  • Advanced Poster
  • *
  • Posts: 957
  • or #f0; daa; add a,#a0; adc a,#40
Re: false positive? nutcracker family FC6
« Reply #2 on: January 22, 2007, 11:09:50 AM »
Hallo,

try the latest VPS (you might use our online scanner here http://onlinescan.avast.com/ ), whether the file is still reported as infected. If so, please send this file to virus@avast.com or to me - cimbal@avast.com ).
May's Law: Software efficiency halves every 18 months, compensating Moore's Law. (David May, INMOS)