Author Topic: Dot Net compatibility?  (Read 7854 times)

0 Members and 1 Guest are viewing this topic.

Heronjr

  • Guest
Dot Net compatibility?
« on: August 13, 2003, 05:39:44 PM »
Hi All,

After installing and updating Avast (free) 4.0.235 VPS-0307-8, it detects the W32.ALCAUL.A4 worm everytime a .Net Framework program executes. Turning off Avast, the program executes fine, otherwise it crashes.

Browsing that .Net program folder, as well as the whole disk C:, Avast does not detect any virus nor worm.

I guess the .Net Framework is confusing Avast, because other antivirus never interfered with such program before.

Any ideas?

Greetings
Heron

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11656
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Dot Net compatibility?
« Reply #1 on: August 13, 2003, 06:30:51 PM »
Hmmm, very interesting...
What filename, exactly, does avast give you when reporting the virus?
Is it a file from the .NET framework, or the EXE itself?

And what OS are you using?

Thanks,
Vlk
« Last Edit: August 13, 2003, 06:31:09 PM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Heronjr

  • Guest
Re:Dot Net compatibility?
« Reply #2 on: August 13, 2003, 07:17:30 PM »
My OS is WinXP Prof SP1 with .Net Framework SP1. The program is an independent utility for using as an add-on to MS Flight Simulator. This utility executable needs the .Net Framework environment, as it was written in VB.Net. You can find it in the file "editvp20.zip" searching Google (or I can send it to you).

No need to install it. Just explode the files in a folder and execute Editvoicepack.exe with Avast ON to receive the alarm. You won't need FlightSim to use it, as it is only a test.

Regards,
Heron

Heronjr

  • Guest
Re:Dot Net compatibility?
« Reply #3 on: August 13, 2003, 07:27:20 PM »
I forgot to mention the file name detected by Avast:

It is a different DLL file each time the program runs, inside the folder c:\Documents and Settings\myname\Local Settings\Temp\xxxxxxxxx.DLL

Thanks,
Heron

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11656
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Dot Net compatibility?
« Reply #4 on: August 13, 2003, 08:02:03 PM »
Indeed an interesting problem.

I managed to simulate it and back up the file - and I passed it to the virus guys for further inspection...
I'll keep you informed...

Thanks,
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11656
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Dot Net compatibility?
« Reply #5 on: August 14, 2003, 03:24:15 PM »
Oh yes, you got us here. It was indeed a false positive. Big thanks for pointing this out!!! :)

It shouldn't be shouting anymore starting with the next virus database update, possiblity due tomorrow.

Thanks again,
Vlk
If at first you don't succeed, then skydiving's not for you.

Heronjr

  • Guest
Re:Dot Net compatibility?
« Reply #6 on: August 14, 2003, 03:55:44 PM »
Thanks for your prompt and kind attention. A thousand points for the Avast crew.

Greetings from Rio de Janeiro,
Heron
 ;)