Virus detected on accessing almost every site!

[teekay]

Almost every time I try to access a site - including Avast home page - a virus warning comes up about the following:

SDFE-ZhugeLiang-4784

This happens both in Firefox and IE, and when downloading email attachments in Eudora.

I can find nothing useful on the Net about this virus - if it is one.

I am very careful, scan frequently, keep Avast up to date, and don't seem to have a virus on my computer.

Please - how can I stop this behaviour?

[mauserme]

Hi teekay,

If you search the forum you'll find several threads about this.  I don't think its been discovered why this happens but it appears to be a corrupt installation or vps file. Try repairing the avast! installation (while on line) or uninstall/reinstall.

To play it safe you could run a scan with Ewido, too.

[teekay]

Weird! The problem miraculously cleared up this morning, maybe because of the latest VPS update or when I did the a Windows XP update.

[CharleyO]

***

Welcome to the forums, teekay.   

Did you re-start you computer during this time? Read this thread ......

http://forum.avast.com/index.php?topic=15326.0


***

[roxor]

hey guys

having the same problem as tweekay has. also reinstalled avast but nothing's changed, still getting the notification.

i guess we just have to wait til' avast fixes the problem?!

regards, rox

[Lisandro]

having the same problem as tweekay has. also reinstalled avast but nothing's changed, still getting the notification.

How did you reinstall? Over the old installation (repair) or uninstall, boot, install again?

Which avast and virus database versions are you using?

Are you sure you're not infected?
Did you run a-squared or ewido to see what you get?

Welcome 

[Vlk]

OK guys, we've been chasing this mysterious problem for some time now. Hopefully, your help will contribute to finally finding out what causes it and how to fix it.

A couple of questions:

1. so, even a complete reinstall of the avast program does not fix the problem?

2. if so, please ZIP the whole avast folder (C:\Program Files\ALWIL Software), including subfolders, and upload it to ftp://ftp.avast.com/incoming (please note that you won't have READ access to the ftp server, just write - so you won't even be able to see what you've just uploaded).

3. BTW the virus is only detected during Web/Mail scanning, or even file system (on-access or on-demand)?

Hopefully, we'll be able to simulate the problem in our lab (on a test machine).

Thanks
Vlk

[roxor]

hey

wow, amazingly fast answers, *thumbs up*!

okay...here's what i've done exactly:

1. tried to repair the installation --> no success
2. uninstalled the whole program, booted & reinstalled it again --> also no change
3. ran ad-aware, a-squared and ewido to check whether i got infected --> no infection

i also disabled java and java script in firefox to make sure that this is not causing the problem...didn't make any difference.

@vlk: the virus only appears when scanning mail and web, as you suggested.
@tech: those are my versions
****************
- File version: 0611-2
- Compilation date: 17.03.2006

- Avast 4.6 Home Edition
- Build: Feb2006 (4.6.763)
- Xtreme Toolkit 1.9.4.0
- Using Active Skin 4.2.7.3
*****************

did you find out anything so far?

thanks for your help!

regards, rox

[athabaska]

I'm experiencing the same problem as well

Running XP SP2 eng.
Eudora 7
IE
Firefox

Looks like the problem appear since last update.
Waiting for a solution..
tnx

[wjcoll]

Hi Guys,

I too have been plagued by this problem, but I may have narrowed down the culprit.

After unistalling and re-installing the program several times I finally switched off the automatic updating of both the program and VPS.  I then installed an earlier version of 4.6 which I had downloaded a while ago.

Running the earlier version, with its associated out-of-date VPS, the problem disappeared.  I then downloaded the VPS update executable and ran it separately rather than letting the program do it.

Everything still OK.   This makes me suspect it's something in the program update that's causing the problem.

What I can say with certainty is that running version 4.6 (build November 2005, (4.6.731) ) with the latest VPS, 0611-2 seems to be stable.

Hope this gives someone some leads.

Cheers,
wjcoll   

[roxor]

hey

problem is solved with the new definition files!
thanks avast, great job!

cheers, rox