Numerous Trojan warnings since last update.

[Yanto.Chiang]

Hi Guys,

My customer in indonesia, has been screaming about this...anybody please concern about this...please.....if you don't want to lose those customer.

We have aware our customer to not download the VPS update first.

[alexinoklahoma]

I just got a warning concerning IOBit360's file as follows: 12/2/2009 9:32:00 PM   SYSTEM   1620   Sign of "Win32:Delf-MZG [Trj]" has been found in "C:\Program Files\IObit\IObit Security 360\is360mon.dll" file. 

Took no action after browsing this Forum - good response so far, folks, appreciate the effort here    I did see that avast 'updated' just moments prior to this alert, so I was a bit leery of believing its actuality.  I bet it will be fixed soon (fingers crossed!!)

And I just started using avast two days ago, LOL...  seeing how slow the Forum is atm I bet there's LOTS of traffic on this 
Alex

[REDACTED]

  please fix this problem asap. It is a huge issue having yoy guys giving us a stuffed up virus definition. A program is now rendered useless because of you. Thanks heaps

[Karmel83]

OMG...I thought I was the only one. I have had 19 warnings (all trojan) since I have updated my Avast today. I am freaking out and I could only delete them because I scanned in safe mode. Please let me know what is going on.

God Bless

Karmel

Avast updated itself about 15 minutes ago and within two minutes began reporting many, many instances of Win32:Delf-MZG in many of my files, including those that had been on my computer for a very long time. I did a boot scan with instructions to move malware to the chest and before I knew it almost twenty files had been moved before I stopped the boot scan. Something seems very wrong here--can these all be false positives?

[NikkiLynne39]

Same here, only so far the only warning I received was from Avant itself, and my Avast moved it to chest, disabled it, and then removed it from my list. I tried a reinstall, virus warning, on an earlier version of Avant, Avast again tossed it into hiding. I haven't gotten the warning on any other program yet, haven't tried for fear now that it will disable everything. My computer has been offline all day, and then tonight soon as I turned it on, this happened, and it was fine last night. I lost all my favorites, important links I had bookmarked for easy access due to owning an online scrap store, and now I can't access anything without first looking it up, and I don't like chrome or IE...I want my Avant back...with no virus warnings!

[d3drocks]

Many PCs in our office are also picking this up. We are actually a software development house and circumstantial evidence is pointing to some Delphi code being flagged as a virus.

All of the software we write is now being flagged as being infected by the Win32:Delp-MZG Trojan - this is obviously a BIG problem for us - I've advised our Tech Support team to be ready for an influx of calls.

Lee.

I can confirm this. Avast just locked me out of my audio production tools which were coded in Delphi. it also locked me out of all of the Delphi coded VST instruments I have. Im pissed. I hit the "do nothing" button, but dissabled avast, because I cant take this bullshit. tempted to go back to AVG now.

[Forward Unto Dawn]

Hi, my avast! program updated its virus database around 3 hours ago. Not long after that, avast! warned that it had detected a trojan horse in the Spybot application extension file SDHelper.dll. After that, Spybot reported 3 registry changes, 2 of which I denied:
• 3/12/2009 2:10:27 PM Allowed (based on authenticode whitelist) value "{53707962-6F74-2D53-2644-206D7942484F}" (new data: "") deleted in Browser Helper Object!
• 3/12/2009 2:10:35 PM Denied (based on user decision) value "BootExecute" (new data: "autocheck autochk *
aswBoot.exe /M:110b04264564
") changed in Session manager!
• 3/12/2009 2:10:38 PM Denied (based on user decision) value "ExcludeFromKnownDlls" (new data: "") deleted in Session manager!

The last two logs above (the ones I denied), have repeated over and over again in the Spybot log file for the last 3 hours, as you can see here:
• 3/12/2009 2:10:39 PM Denied (based on user blacklist) value "BootExecute" (new data: "autocheck autochk *
aswBoot.exe /M:110b04264564
") changed in Session manager!
• 3/12/2009 2:10:39 PM Denied (based on user blacklist) value "ExcludeFromKnownDlls" (new data: "") deleted in Session manager!

Something is obviously keen to change registry values…

Anyway, I tried moving the SDHelper.dll file to the chest, but that didn’t work. I was also unable to delete the file. What should I do?

P.S. Man, there’s a lot of traffic on this website!

[Eaulive]

The latest definitions are online since 45 minutes: 091203-1

[Abera]

I have been working on a local server (Wamp) for over two years now. With a big system update for my site that (I am a week late and  now) GONE. It and many of my prgs got kicked tonight. I hope you people here at Avast have some way of getting them back, because from what I have been reading, I'm not the only one pissed! Pure bullshit!

[pdafreak]

VPS update 091203-1 fixed this issue. go update ur avast

[Eaulive]

Download the new definitions, go to the chest and restore all the files that have been moved there today, problem fixed.
Rescan to make sure.

Of course, if you chose "delete" instead of "move to chest", then tough luck.

[piscean piper]

The new update "discovered" win32 zbot-mkk in 2 trusted programs on my PC. Irfan View and Damn Nfo Viewer were both disabled. I had to turn Avast off as it was continuing to found other viruses. How about a fix for this one? :'(

[Yanto.Chiang]

Hi ALWIl Team,

Just advice,

Next time if you guys would like to launch or release a new signature, please try it first at your inside labs. 

So some people, which have critical application not screw up just because 1 AV definition.

Good job

[Forward Unto Dawn]

avast!, don't let this happen again. I lost several program files to deletion, since the 'move to chest' function stopped working. I've spent ages repairing all of the damaged programs. I will seriously reconsider using this antivirus software.

[name123]

ya , i already have many software deleted cannot work