« previous next »
Pages: [1]   Go Down

Author Topic: Anyone running Avast alongside Jetico ? Trojan problem  (Read 7093 times)

0 Members and 1 Guest are viewing this topic.

joey_365

  • Guest
Anyone running Avast alongside Jetico ? Trojan problem
« on: September 07, 2006, 09:28:05 PM »
I've just ran a weekly scan of my drive, with avast AV. It picked up Win32:Rbot-CSS in my Jetico Personal Firewall directory. According to Avast bcfgenv.dll was infected, can any Jetico users confirm that they have this file in the Jetico directory ?

I tried to move the file to chest, but was informed that, because it was in memory, a boot scan was required. Which I did. I moved it to the chest from there, however on restart, Jetico is asking for permissions all over again, for everything that needs access. I'm pretty sure the infected file, must be the configuration file for Jetico.

I made an image of my drive before doing anything, so can restore again, if I made any rash errors on my part. Can anyone confirm this file exists on their machine ? Or maybe this has happened to someone else too ?
Logged

Jarmo P

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #1 on: September 07, 2006, 09:59:57 PM »
You should be able to remove that file back from chest, at least if Stopping On-Access Protection temporarily by right clicking the a-icon. Then you can send that file (copy) to a scan like Jotti where it will be scanned with various antiviruses:
http://virusscan.jotti.org/

« Last Edit: September 07, 2006, 10:05:06 PM by Jarmo P »
Logged

joey_365

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #2 on: September 07, 2006, 11:11:00 PM »
Thanks for that Jarmo  :)

Although, the site seems a little flakey. It took me several attempts to upload the file, and when it did, it says it was scanning, but just stayed there for a long time and did nothing.
Logged

Jarmo P

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #3 on: September 07, 2006, 11:21:02 PM »
Strange, maybe it was busy. It is considered a trustworthy site and not flakey ???
You could try this one instead:
http://www.virustotal.com/en/indexx.html

Logged

joey_365

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #4 on: September 07, 2006, 11:43:29 PM »
Thanks Jarmo  :)

That worked perfectly, it seems only Avast was picking it up, all the rest reported nothing.

Many Thanks.
Logged

Jarmo P

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #5 on: September 07, 2006, 11:59:53 PM »
You can be happy now, having found Avast give a false positive. You were giving valuable information to virus experts and readers who might have had the same problem
I was too last week:
http://forum.avast.com/index.php?topic=23215.0

BTW, before I gave you that last link, since i have not ever used that before, i submitted processguard.exe to that scan and 2 antiviruses found that suspicious, but not avast this time. False positives seem quite common these days.
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #6 on: September 08, 2006, 12:31:36 AM »
Quote from: joey_365 on September 07, 2006, 11:43:29 PM
Thanks Jarmo  :)

That worked perfectly, it seems only Avast was picking it up, all the rest reported nothing.

Many Thanks.
You want to send this to avast so it can be corrected they can update the VPS files.
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest.

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan, it will need to be temporarily removed from the standard shield exclusions otherwise it won't be scanned), when it is no longer detected then you can also remove it from the program settings, exclusions.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

joey_365

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #7 on: September 08, 2006, 12:47:41 AM »
Thanks again Jarmo for the help and information.  :)

DavidR,

Thanks also for your help, I will contact Avast sometime tomorrow, as it's late now. Thanks for taking the time to answer, and for your informative post also.  :)
Logged

ReneeDj3

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #8 on: September 08, 2006, 07:05:02 PM »
I've had the same problem showing up in my AOL Active Security Monitor.  Win32:Rbot-CCS is showing up as a trojan in OPSWATAVCommon.dll.  What can I do to get my system back to operating normally before both programs updated?
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #9 on: September 08, 2006, 10:28:39 PM »
Quote
What can I do to get my system back to operating normally before both programs updated?
By following the same instructions/advice, confirm the detection id either good or false by using the links to VirusTotal or Jotti, files can't be uploaded from the chest so you will need to either restore or move to a temporary folder.

If it is a false positive, send it to avast and add the path for the file to the exclusions as mentioned in my previous post.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

HIPPO

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #10 on: September 09, 2006, 02:30:34 AM »
I am using Jetico Personal Firewall.
My Avast didn't detect "bcfgenv.dll" as a virus.
I checked it with VirusTotal.
The result is below.
I think that your file is strange.

Property of "bcfgen.dll"
File size : 61,440bite.
File Version : 1.0.0.26
description : Configuration Environment Support


Complete scanning result of "bcfgenv.dll", received in VirusTotal at 09.09.2006, 02:06:22 (CET).
Antivirus   Version   Update   Result
AntiVir   7.1.1.16   09.08.2006   no virus found
Authentium   4.93.8   09.09.2006   no virus found
Avast   4.7.844.0   09.08.2006   no virus found
AVG   386   09.08.2006   no virus found
BitDefender   7.2   09.08.2006   no virus found
CAT-QuickHeal   8.00   09.07.2006   no virus found
ClamAV   devel-20060426   09.09.2006   no virus found
DrWeb   4.33   09.08.2006   no virus found
eTrust-InoculateIT   23.72.120   09.08.2006   no virus found
eTrust-Vet   30.3.3068   09.08.2006   no virus found
Ewido   4.0   09.05.2006   no virus found
Fortinet   2.77.0.0   09.09.2006   no virus found
F-Prot   3.16f   09.09.2006   no virus found
F-Prot4   4.2.1.29   09.08.2006   no virus found
Ikarus   0.2.65.0   09.08.2006   no virus found
Kaspersky   4.0.2.24   09.09.2006   no virus found
McAfee   4848   09.08.2006   no virus found
Microsoft   1.1560   09.09.2006   no virus found
NOD32v2   1.1746   09.08.2006   no virus found
Norman   5.90.23   09.08.2006   no virus found
Panda   9.0.0.4   09.08.2006   no virus found
Sophos   4.09.0   09.09.2006   no virus found
Symantec   8.0   09.09.2006   no virus found
TheHacker   5.9.8.208   09.08.2006   no virus found
UNA   1.83   09.08.2006   no virus found
VBA32   3.11.1   09.07.2006   no virus found
VirusBuster   4.3.7:9   09.08.2006   no virus found
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #11 on: September 09, 2006, 02:54:10 AM »
It could be that the VPS has been updated as this may have been a false positive, see reply #4 above.

Since the last reported VPS update on http://www.avast.com/eng/vps_history.html is 07.09.2006 - 0636-2 and the current one is 08.09.2006 - 0636-3 it looks like this VPS update was corrective rather than adding new signatures.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

rdmaloyjr

  • Guest
Re: Anyone running Avast alongside Jetico ? Trojan problem
« Reply #12 on: September 09, 2006, 03:54:29 AM »
I use Jetico with avast! & bcfgenv.dll isn't detected as malware.

Complete scanning result of "bcfgenv.dll", received in VirusTotal at 09.09.2006, 03:22:44 (CET).

Antivirus   Version   Update   Result
AntiVir   7.1.1.16   09.08.2006   no virus found
Authentium   4.93.8   09.09.2006   no virus found
Avast   4.7.844.0   09.08.2006   no virus found
AVG   386   09.08.2006   no virus found
BitDefender   7.2   09.08.2006   no virus found
CAT-QuickHeal   8.00   09.07.2006   no virus found
ClamAV   devel-20060426   09.09.2006   no virus found
DrWeb   4.33   09.09.2006   no virus found
eTrust-InoculateIT   23.72.120   09.08.2006   no virus found
eTrust-Vet   30.3.3068   09.08.2006   no virus found
Ewido   4.0   09.05.2006   no virus found
Fortinet   2.77.0.0   09.09.2006   no virus found
F-Prot   3.16f   09.09.2006   no virus found
F-Prot4   4.2.1.29   09.08.2006   no virus found
Ikarus   0.2.65.0   09.08.2006   no virus found
Kaspersky   4.0.2.24   09.09.2006   no virus found
McAfee   4848   09.08.2006   no virus found
Microsoft   1.1560   09.09.2006   no virus found
NOD32v2   1.1746   09.08.2006   no virus found
Norman   5.90.23   09.08.2006   no virus found
Panda   9.0.0.4   09.08.2006   no virus found
Sophos   4.09.0   09.09.2006   no virus found
Symantec   8.0   09.09.2006   no virus found
TheHacker   5.9.8.208   09.08.2006   no virus found
UNA   1.83   09.08.2006   no virus found
VBA32   3.11.1   09.07.2006   no virus found
VirusBuster   4.3.7:9   09.08.2006   no virus found

I feel JPF is the perfect compliment to avast! with its great protection & very low resource use.  avast! is the best anti-virus & Jetico Personal Firewall is the best firewall in my opinion.  Neither has ever let me down.  After Jetico is configured I get very few application alerts, the ones I do get are JPF doing its job.

In alphabetical order are the four most outstanding security applications I use: avast!, Jetico, SpywareBlaster & WinPatrol.
Logged
Pages: [1]   Go Up
« previous next »