Author Topic: Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351  (Read 11574 times)

0 Members and 1 Guest are viewing this topic.

iwannet

  • Guest
Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« on: October 02, 2004, 06:46:14 PM »
I found a little funny link. A forum link  ;)
Please use OPERA 7.5 as your browser, with Avast 4.1 Pro and VPS Sept 28, 2004 Engine 0440-0...

Try this link

http://www.m3-access.com/community/forum/topic.asp?ARCHIVE=&TOPIC_ID=3961

And you will found virus detected Win32:Trojano-351 [Trj]  
I think this forum had some "unique" words that same with Virus ID?
I dont know?  ??? Is this bug? or Avasst scan with heuristic?

But this Virus can't found if we're using IE, Mozilla or FireFox Browser  ;D


OOT:

BEst Regards,...


4926

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #1 on: October 02, 2004, 06:58:16 PM »
Would would someone use a old vps? 440-3 is the most recent.

iwannet

  • Guest
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #2 on: October 02, 2004, 07:14:33 PM »
I am using VPS 440-3 now..
THe problem still occurs.. Found Virus..  ???

But, its okay.. No problem, i can accept those "funny" problem.
And AVAST is still The best for me  8)

Thanks

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #3 on: October 02, 2004, 08:41:39 PM »
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect ('virus', will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner www.virusscan.jotti.dhs.org if any other scanners here detect them it is less likely to be a false positive.

HTH David
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

softwareguy

  • Guest
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #4 on: October 03, 2004, 08:10:58 PM »
No virus is detected on that page here. :-\

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #5 on: October 03, 2004, 08:56:45 PM »
Avast scan with heuristic?

Only Mail scanning has heuristics, not the other providers.

But this Virus can't found if we're using IE, Mozilla or FireFox Browser  ;D

Strange, won't the problem be on Opera?
The best things in life are free.

iwannet

  • Guest
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #6 on: October 06, 2004, 05:09:09 PM »
Sorry guys.. Now seem okay. Not detected anymore..  (cunfusing)

But i am still keep the file (i took from opera cache), that moved by Avast to Virus Chest Directory. And i dont know how to read the html code

Here you can download the html file http://www.kesetrum.com/free/opr052EL.htm ..

Notes: Use "save as" target..

Thanks for your kind help...

S.Z.Craftec

  • Guest
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #7 on: November 05, 2004, 01:39:25 PM »
Same thing is happening in here, but only when I try to open this thread  ???  ???  ???

See here:

http://forum.avast.com/index.php?board=2;action=display;threadid=8402

matthew

  • Guest
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #8 on: November 05, 2004, 02:28:31 PM »
I say holy shit!

Quote
No, I don't think something is wrong with that thread, but there is some suspicious link in very first post in that thread...

On the other hand, take a look how strange is that thread's form... everything is shifted to far right without any visible reason... no huge attached pictures, nothing...

and

Quote
Just passed through the same thread. I'm right now using NOD32 until avast! 4.5 final is out (if i'll be able to wait that long  ) and i didn't get anything (settings are maxed out). But i'm using firefox...

????!!!!?!?!??!?

i just can't find something not offensive to reply. but i didn't come to offend anybody, so i just say goodbye.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #9 on: November 05, 2004, 02:48:07 PM »
Whats the problem if i'm using NOD32 right now? I'm testing antiviruses on regular basis (not only throwing samples at them, but actually using them so i can recommend them based on all aspects,not just detection) so thats nothing unussual.
My main antivirus is still avast! which is installed and in use most of the time. I just pointed that NOD32 doesn't find anything as for doublecheck...
Visit my webpage Angry Sheep Blog

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #10 on: November 05, 2004, 02:57:51 PM »
I just had a look at the source code of the page iwannet posted.

That page redirects to http://public.searchbar****.com. That is one of the pages responsible for spreading the Blazefind adware. So it is perfectly understandable why Avast would react on it. (I ofcourse have put the *'s there, to avoid people from going there)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #11 on: November 05, 2004, 03:02:53 PM »
Matthew, your place won't be on avast forums this way...
If you do not realise where you are and what kind of forums are these, it's better take a breath and do not login  8)

I take the freedom to publish an IM he sent to me because it was infected by Win32:Trojano-351. Can Alwil team help me on this? Thanks.

(Today at 02:06:15pm) matthew has sent you the following Instant Message:
I researched the issue a little cuz it happened to me too (btw, latest
program and definitions). The problem is not with opera. i don't even think it's a false positive. The warning is triggered by the string "********************", part of ""  (the long hex string can differ from case to case). I just downloaded the script from there (using wget.exe) and, for what i can tell, i didn't like at all. actually looks like some kind of trojan or spyware to me. i attached it with my post.


I DON'T HAVE TIME TO GET RID FROM THIS.
I'M ANGRY TO RECEIVE INFECTED FILES (OR FALSE POSITIVES).
THIS IS MY COMPUTER AND I DON'T WANT IT INFECTED JUST FOR FUN
 >:(
« Last Edit: November 05, 2004, 05:17:05 PM by igor »
The best things in life are free.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #12 on: November 05, 2004, 03:15:14 PM »
I just had a look at the source code of the page iwannet posted.

That page redirects to http://public.searchbar****.com. That is one of the pages responsible for spreading the Blazefind adware. So it is perfectly understandable why Avast would react on it. (I ofcourse have put the *'s there, to avoid people from going there)

Thanks Eddy.
Sometimes I want to send this kind of people to hell  :P
The best things in life are free.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #13 on: November 05, 2004, 03:26:02 PM »
According to Jotti, Avast is theonly one who detects that IM as infected. So it sure looks like a FP.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:Avast 4.1 Pro? Bug or False Detection? Win32:Trojano-351
« Reply #14 on: November 05, 2004, 07:17:46 PM »
According to Jotti, Avast is theonly one who detects that IM as infected. So it sure looks like a FP.

It's a matter of him...  :(
Why don't the users do like any other and send the file to virus@avast.com ?
Why should it take our time just to mess your connection, avast, email and so on.
I lose too much time with this guy. I'm really upset. It's not frequent, but today  >:(
The best things in life are free.