Avast! thinks flashgot.exe is a virus?

[frebbe]

Avast Antivirus Home 4.8 with virus database VPS090718-0 tells me, that it has found a trojan in flashgot:

18.07.2009 20:30:07 Sxxx 1656 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Dokumente und Einstellungen\xxx\Anwendungsdaten\Mozilla\Firefox\Profiles\elqxxx.default\FlashGot.exe" file.

I'm sure its a false alarm, or not?

[Dinosaur]

I've been offline all day, and Flashgot was working all the way up to yesterday. So nothing has changed on my system except my virus definitions which have been updated to today's definitions. Flashgot.exe is now being detected by avast! 4.8 Pro as having Win32:Trojan-gen {Other}.

Of course I'm going to presume this is a false positive because I've deleted flashgot.exe, ran a virus check on my system that shows no other problems, uninstalled Flashgot, reinstalled it from the Mozilla Add-On's tool with Firefox and as soon as I restart firefox avast! throws another warning about flashgot.exe having Win32:Trojan-gen {Other} again.

Is anybody else having the same problems, either with avast! or another anti-virus?

[solotoo]

My Avast is also reporting a trojan...
Came here for some reassurance!

[Dinosaur]

Avast Antivirus Home 4.8 with virus database VPS090718-0 tells me, that it has found a trojan in flashgot:

18.07.2009 20:30:07 Sxxx 1656 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Dokumente und Einstellungen\xxx\Anwendungsdaten\Mozilla\Firefox\Profiles\elqxxx.default\FlashGot.exe" file.

I'm sure its a false alarm, or not?

Haha, I just started my own thread about this, must have been writing it at the same time as you. Running the exact same setup, avast! 4.8 and virus database from today VPS090718-0. It's most likely a false positive

[mosfet92]

Hello

I have exactly the same problem
Avast is reporting a trojan when trying to update to version 1.1.9.8
Stopped avast a few moment ( ... ) to allow update
But when I firefox restarted, I got the trojan alert again ; I moved the exe file to quarantine

Emmanuel

[Dinosaur]

I've uploaded the quarantined file to Jotti ..this is what I got

File size: 167376 bytes
Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: 240374614cb0ef142dad6c6dcbab699e
SHA1: b4b95e0c579dc72811faea72fae50b9bdbaf8811
Filename: FlashGot.exe
Status: Scan finished. 2 out of 21 scanners reported malware.
Scan taken on: Sat 18 Jul 2009 20:38:47 (CET)

Both GDATA and Avast! detected malware ....similar definitions files I would think.

http://virusscan.jotti.org/en/scanresul ... 0cce1bd4ce

[goodrichm]

Same thing started happening to me Today after Avast updated its virus definitions. Has anyone just ignored the alert and still using flashgot with no problems? MG

[Giorgio Maone]

The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.

[Giorgio Maone]

The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.

[zokocx]

I have false positive too ,same Avast 4.8 and some virus database.
It is not 1st time for Avast to report false positive, i need to find better antivirus protection.

[GµårÐïåñ]

Avast is prone to false positives, nothing new. Get a better AV or write them and tell them they got overzealous once again. Despite the fact that I have 100% faith in Giorgio, I put the file through our company's array of 26 industry standard AV engines that we use for benchmarks and testing and ONLY Avast popped. What does that tell you?

[aney1]

Problem solved!
Just update your VRDB.

[goodrichm]

As aney1 said, Avast! just published a new virus definition to fix this problem. Life is good once again...

http://forum.avast.com/index.php?topic=46897.0

[Dinosaur]

The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.

Thank you Giorgio for your fast response. And to you too MG/goodrichm for posting it to the Avast! forums Updated the defs, no more problems

[therube]

Luntrus or others, could you make note in that thread that they are also talking about two separate programs.

One being FlashGot, a Mozilla extension, the other being FlashGet, a download manager.

They are totally separate items. (Though one does facilitate the usage of the other.)