Author Topic: Is ybtlphsv.dll False positive  (Read 2443 times)

0 Members and 1 Guest are viewing this topic.

Jed1

  • Guest
Is ybtlphsv.dll False positive
« on: November 24, 2005, 06:57:49 PM »
11/24/2005 10:35:16   SYSTEM   736   Sign of "Win32:Trojano-2949 [Trj]" has been found in "C:\Program Files\Yahoo!\Messenger\ybtlphsv.dll" file. 
11/24/2005 10:36:05   SYSTEM   736   Sign of "Win32:Trojano-2949 [Trj]" has been found in "C:\Program Files\Yahoo!\Messenger\ybtlphsv.dll" file.

- Program: Already up to date
  (current version 4.6.731)
- Vps: Already up to date
  (current version 0547-4)

OK.

Avast updated itself today as above. After the requested reboot -avast pop-up- trojan detected etc... as above.

Moved suspect file to 'vault' and now Yahoo Messanger won't log in it just keeps erroring.

Completely removed messanger and downloaded a fresh copy- Once installed I got the same 'avast pop-up'

Is this actually a trojan in Yahoo or a false positive ?

If I google for Win32:Trojano-2949 I get no results at all

Please help

Thanks

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11860
    • AVAST Software
Re: Is ybtlphsv.dll False positive
« Reply #1 on: November 24, 2005, 07:23:56 PM »
Are you saying that even with 0547-4 this problem occurs? Exactly this false positive should have been fixed in 0547-4...
Can you Restore the file from Chest?

Jed1

  • Guest
Re: Is ybtlphsv.dll False positive
« Reply #2 on: November 24, 2005, 07:31:09 PM »
OK I have restored the file and performed a dedicated scan on the Yahoo directory -NO ALERT

The only thing I can think of is that Avast has updated itself again since I put the file in the chest.

All working OK  :)

Thanks