AVAST 5 5.0.677.0 flags file with Win32:WinVNCbased-F

[victor43]

I downloaded the file from here httpz://www.trustware.com/download-2 Is this a false positive? I ran the file on www.virustotal.com and received the virus detection by avast

File name:
BufferZoneProFree.msi
Submission date:
2011-03-07 18:55:53 (UTC)
Current status:
queued queued analysing finished
Result:
2/ 43 (4.7%)

Antivirus Version Last Update Result
AhnLab-V3 2011.03.07.06 2011.03.07 -
AntiVir 7.11.4.100 2011.03.07 -
Antiy-AVL 2.0.3.7 2011.03.06 -
Avast 4.8.1351.0 2011.03.07 -
Avast5 5.0.677.0 2011.03.07 Win32:WinVNCbased-F
AVG 10.0.0.1190 2011.03.07 -
BitDefender 7.2 2011.03.07 -
CAT-QuickHeal 11.00 2011.03.07 -
ClamAV 0.96.4.0 2011.03.07 -
Commtouch 5.2.11.5 2011.03.07 -
Comodo 7903 2011.03.07 -
DrWeb 5.0.2.03300 2011.03.07 -
Emsisoft 5.1.0.2 2011.03.07 -
eSafe 7.0.17.0 2011.03.06 -
eTrust-Vet 36.1.8198 2011.03.04 -
F-Prot 4.6.2.117 2011.03.07 -
F-Secure 9.0.16440.0 2011.03.07 -
Fortinet 4.2.254.0 2011.03.07 -
GData 21 2011.03.07 -
Ikarus T3.1.1.97.0 2011.03.07 -
Jiangmin 13.0.900 2011.03.07 -
K7AntiVirus 9.92.4048 2011.03.07 -
Kaspersky 7.0.0.125 2011.03.07 -
McAfee 5.400.0.1158 2011.03.07 -
McAfee-GW-Edition 2010.1C 2011.03.07 -
Microsoft 1.6603 2011.03.07 -
NOD32 5933 2011.03.07 -
Norman 6.07.03 2011.03.07 -
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.06 -
PCTools 7.0.3.5 2011.03.07 -
Prevx 3.0 2011.03.07 -
Rising 23.48.00.06 2011.03.07 -
Sophos 4.63.0 2011.03.07 -
SUPERAntiSpyware 4.40.0.1006 2011.03.07 -
Symantec 20101.3.0.103 2011.03.07 WS.Reputation.1
TheHacker 6.7.0.1.145 2011.03.06 -
TrendMicro 9.200.0.1012 2011.03.07 -
TrendMicro-HouseCall 9.200.0.1012 2011.03.07 -
VBA32 3.12.14.3 2011.03.04 -
VIPRE 8628 2011.03.07 -
ViRobot 2011.3.7.4345 2011.03.07 -
VirusBuster 13.6.239.0 2011.03.07 -
Additional information
Show all
MD5 : 3427da59faa287d0bfa2c99804fc6450
SHA1 : 6203a4c2cba4132f88c2fd8fd4fe52e962d38faf
SHA256: 8278d91df9d7874e6a1c3263811f8dd4e7fb1cf1ae275bb3dc8fad74a58a1c02

[SafeSurf]

Please change the link you provided to a non-link: change http to hXXP just in case it is malware and no one clicks on it accidentally.  Thank you.

Is this file in your Virus Chest?  If so, you can upload it to Avast Virus Lab and it will be sent with the next virus definitions update.

FYI -- This post would have received more attention if it was posted in the appropriate section of "Virus and Worms" section of the forum.  Thank you. 

[victor43]

Please change the link you provided to a non-link: change http to hXXP just in case it is malware and no one clicks on it accidentally.  Thank you.

Is this file in your Virus Chest?  If so, you can upload it to Avast Virus Lab and it will be sent with the next virus definitions update.

FYI -- This post would have received more attention if it was posted in the appropriate section of "Virus and Worms" section of the forum.  Thank you. 

No its not in my virus chest. However Trustware explained to me that the two detection are false positives. Appreciate the reply and apologize for choosing the wrong forums

[DavidR]

Ensure that you have the latest virus definitions, I was able to download this and no alert by the web shield and scanned it using ashQuick and no alert, see image.

I have no idea why you are still using avast 5.0.677 as avast 6.0.1000 has been out for a while now. But if you are going to stay on 5.0 for a while I would advise you to at the very least get the latest version of 5.0.889.

That said it would be better to go to avast 6.0.1000.

[victor43]

Ensure that you have the latest virus definitions, I was able to download this and no alert by the web shield and scanned it using ashQuick and no alert, see image.

I have no idea why you are still using avast 5.0.677 as avast 6.0.1000 has been out for a while now. But if you are going to stay on 5.0 for a while I would advise you to at the very least get the latest version of 5.0.889.

That said it would be better to go to avast 6.0.1000.

Thanks for the advice. I have downloaded AVAST 6.0x just recently and installed it. Victor.

[DavidR]

You're welcome.