Author Topic: Win32:Trojano-898 [Trj]?????  (Read 15987 times)

0 Members and 1 Guest are viewing this topic.

gate1975mlm

  • Guest
Win32:Trojano-898 [Trj]?????
« on: January 11, 2005, 06:11:22 PM »
Hi I just got the latest Avast update and now all of a sudden it is saying that  the Win32:Trojano-898 [Trj] is found in C:\Program Files\TraySoft\PhoneTray\PhoneTray.exe Which is Phonetray program. It never did this until this new update that I got this morning. And I know that PhoneTry is a clean program. http://phonetray.traysoft.com/

So what is going on here?

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Win32:Trojano-898 [Trj]?????
« Reply #1 on: January 11, 2005, 06:16:03 PM »
You can verify that it's a false-positive by submitting it to http://virusscan.jotti.dhs.org/ where it will be ckecked by various online AV programs.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

gate1975mlm

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #2 on: January 11, 2005, 06:46:58 PM »
   
Service load:  0%        100% 
 
File:  PhoneTray.exe 
Status:  INFECTED/MALWARE 
Packers detected:  PE_PATCH
   
AntiVir  No viruses found (0.17 seconds taken)
Avast  Win32:Trojano-898 (1.51 seconds taken)
BitDefender  No viruses found (0.60 seconds taken)
ClamAV  No viruses found (0.40 seconds taken)
Dr.Web  No viruses found (0.61 seconds taken)
F-Prot Antivirus  No viruses found (0.52 seconds taken)
Kaspersky Anti-Virus  No viruses found (0.70 seconds taken)
mks_vir  Win32.4 (probable variant) (0.22 seconds taken)
NOD32  No viruses found (0.61 seconds taken)
Norman Virus Control  No viruses found (2.04 seconds taken)
   
Statistics 
Last piece of malware found was not-a-virus:RiskWare.Monitor.Perflogger.al in Slave.exe, detected by:

Scanner  Malware name  Time taken 
AntiVir  X  0.17 seconds 
Avast  X  1.51 seconds 
BitDefender  Trojan.Spy.Agent.Y  0.35 seconds 
ClamAV  X  0.44 seconds 
Dr.Web  X  0.55 seconds 
F-Prot Antivirus  X  0.24 seconds 
Kaspersky Anti-Virus  not-a-virus:RiskWare.Monitor.Perflogger.al  2.21 seconds 
mks_vir  X  0.99 seconds 
NOD32  X  1.23 seconds 
Norman Virus Control  X  3.10 seconds 


 
Service statistics:

11124 files (7848 of those unique) have been uploaded & scanned since 31/12/2004, the day of the last database purge.
2299 of those 7848 files contained a virus or any other form of malware.
This page has been visited 21428 times in this time period.
This service managed to spot 229 pieces of malware no vendor used knew about at the time of uploading.
The service also warned against 1243 suspicious files without any help from scanner results.
However, 69 files reported to be OK were found out to be malware later (this is checked daily).
As far as can be told, all this together makes this service 99.12% accurate. However, since it is very well possible malware has been uploaded no scanner knows about at this time, this number is to be taken with a proper amount of skepticism.

No I am not sitting still! For those of you interested, a new, better version of this service is being developed. Click here for a sneak peek. It is not finished. It has bugs. Please use it for testing purposes ONLY.
If you have suggestions and/or comments, please send me them! 
Most popular malware:

Rank  Malware name  Uploaded  Last known filename 
1  backdoor.rbot.gen  114 times  rBot.exe 
2  win32:trojan-gen. {other}  62 times  PT_HACK.rar 
3  trojan.spy.agent.y  54 times  Slave.exe 
4  backdoor.win32.rbot.gen  53 times  R.EXE 
5  win32.hllw.mybot.based  49 times  qsosrv.zip 
6  backdoor.agobot.3.gen  45 times  gobot3.exe 
7  win32.hllw.mybot  33 times  defragfat34.exe 
8  trojan.unremote.a  31 times  Aimbot_with_PG.zip 
9  behaveslike:win32.explorerhijack  30 times  Kit.exe 
10  behaveslike:trojan.downloader  29 times  211.exe 
11  .admili  26 times  AdmilliKeep.exe 
12  win32:trojan-gen.  22 times  vvv.zip 
13  win32.hllw.forbot.based  21 times  windowscr32.exe 
14  trojan.swizzor  21 times  TrojanDownloader.Win32.Swizzor.t.zip 
15  backdoor.win32.agobot.gen  21 times  agobot32.exe 
 

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Win32:Trojano-898 [Trj]?????
« Reply #3 on: January 11, 2005, 06:54:26 PM »
Even though 2 AVs report infection, I would suggest sending the infected file to avast.

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

uilop

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #4 on: January 11, 2005, 07:28:42 PM »
I've almost the same problem!
Avast finds "Win32:Trojano-898" in msa.dll! msa.dll is a audio plugin for Nero Burning ROM!
Only the newest virus definition 0502-1 has this false-positive!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Win32:Trojano-898 [Trj]?????
« Reply #5 on: January 11, 2005, 08:25:39 PM »
Same problem here. I can't even update Nero because avast! doesn't allow that file to be installed.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Win32:Trojano-898 [Trj]?????
« Reply #6 on: January 11, 2005, 08:30:31 PM »
Latest VPS is 0502-2, a short while ago.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Win32:Trojano-898 [Trj]?????
« Reply #7 on: January 11, 2005, 09:49:53 PM »
Here's the message that came with the last update:

New iAVS update (VPS 502-2) for avast! program has been released recently.
Related information could be also found on our Internet sites.
Note: False alarm removed

Thanks Alwil team. ;D
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Heggi

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #8 on: January 12, 2005, 12:23:20 AM »
Hi.
I found this trojan in system restore and in my firewall. it should be removed now and i reinstalled the firewall. so if it´s a false positive it´s good and if not i hope it took care of it ;)

Heggi

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #9 on: January 12, 2005, 12:23:34 AM »
Hi.
I found this trojan in system restore and in my firewall. it should be removed now and i reinstalled the firewall. so if it´s a false positive it´s good and if not i hope it took care of it ;)

ADD by me: sorry for posting 2 identic messages. it was a mistake.. :-\ :-[

gate1975mlm

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #10 on: January 12, 2005, 01:29:44 AM »
WoW that was quick! The new update fixed my problem. Thanks Avast Team! :)

peterx2

  • Guest
Re: Win32:Trojano-898 [Trj]?????
« Reply #11 on: January 12, 2005, 02:24:08 AM »
It seems that I am stuck between 502-1 and 502-2
the scan now passes but when trying to reinstall a program it still rejects it and says that 502-1 wont pass it. The main display while running a scan indicates 502-1 while summary says 502-2..
hopefully this will get fixed soon.
pete

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Win32:Trojano-898 [Trj]?????
« Reply #12 on: January 12, 2005, 02:46:01 AM »
Alwil Please take a look:
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Win32:Trojano-898 [Trj]?????
« Reply #13 on: January 12, 2005, 02:50:27 AM »
This is what happens when I try to update Nero.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Win32:Trojano-898 [Trj]?????
« Reply #14 on: January 12, 2005, 02:51:31 AM »
peterx2,

try a repair of Avast.