Virus or false alarm?

[Heggi]

I recently reinstalled my outpost firewall cause my comp had become unstable when i removed a file from the program that avast said was a virus.
the infected file was in outpost firewall folder\Plugins\AntiSpyware.the file is called spy_main.sdb. The virus name is Win32:DyfucDldr-AC [Trj].
Well i reinstalled my firewall and just wanted to check how that file is now.
i found out that avast says its a virus in my new installed file too...
i havent had any problems yet because of this, other than my comp getting bad after removing the file last time.

so far outpost has been a great firewall i think

what do u think? is really a virus or false alarm?
is there anybody else here using outpost firewall 3?

i'll be happy to hear ur answers and advice

[DavidR]

I believe it is detecting Outposts anti-spyware signatures which should really be encrypted to avoid this. This has also been discussed previously in the forums a search for Win32:DyfucDldr-AC and outpost should return this information.
 
I have Outpost Pro 3.5 and I don't have this problem, but I have totally disabled this anti-spyware plug-in, it is based on AdAware and from your previous information, you don't need this plug-in much less its resident status as you are more than well covered in the anti-spyware department.

right now i have on this computer. avast4.5, norton antivirus firewall, spybot search and destroy, ad-aware SE, SpywareBlaster.

So save yourself some CPU cycles and also speed your boot times and disable this plug-in, your choice though.

[Heggi]

Thanks for taking time answering my question! thanks for the advice 

[DavidR]

Your welcome, I like Outpost but it is starting to get bloated. In tests I did when it was first introduced, the inclusion of the anti-spyware plug-in if enabled adds something in the order of 1000 file accesses at boot time (which may mean avast has to scan them) and depending on your Standard Shield sensitivity can slow the boot considerably.

[bar5]

I had this same "Trojan" message while doing a weekly scan.

win32dyfucdldr-AC (trj), but mine kept reading it was in Counterspy folder.

I did all the usual scans with Spybot S&D, Ad-aware, a-squared, Ewido, and Counterspy. Came up clean. So I felt a little better, but still wanted reassurance, and just reading this post did confirm a possibility of false reading. It is a possibility it has picked up Counterspy spyware signature files.

Just wanted to let you know you are not alone, and neither am I.

Barb