Avast! thinks flashgot.exe is a virus?

Ask for help about FlashGot, no registration needed to post
frebbe

Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by frebbe » Sat Jul 18, 2009 6:41 pm

Avast Antivirus Home 4.8 with virus database VPS090718-0 tells me, that it has found a trojan in flashgot:

18.07.2009 20:30:07 Sxxx 1656 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Dokumente und Einstellungen\xxx\Anwendungsdaten\Mozilla\Firefox\Profiles\elqxxx.default\FlashGot.exe" file.

I'm sure its a false alarm, or not?
Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

Dinosaur

Avast! thinks flashgot.exe is a virus?

Post by Dinosaur » Sat Jul 18, 2009 6:47 pm

I've been offline all day, and Flashgot was working all the way up to yesterday. So nothing has changed on my system except my virus definitions which have been updated to today's definitions. Flashgot.exe is now being detected by avast! 4.8 Pro as having Win32:Trojan-gen {Other}.

Of course I'm going to presume this is a false positive because I've deleted flashgot.exe, ran a virus check on my system that shows no other problems, uninstalled Flashgot, reinstalled it from the Mozilla Add-On's tool with Firefox and as soon as I restart firefox avast! throws another warning about flashgot.exe having Win32:Trojan-gen {Other} again.

Is anybody else having the same problems, either with avast! or another anti-virus?
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1) Gecko/20090624 Firefox/3.5

solotoo

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by solotoo » Sat Jul 18, 2009 6:49 pm

My Avast is also reporting a trojan...
Came here for some reassurance! :)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

Dinosaur

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by Dinosaur » Sat Jul 18, 2009 6:50 pm

frebbe wrote:Avast Antivirus Home 4.8 with virus database VPS090718-0 tells me, that it has found a trojan in flashgot:

18.07.2009 20:30:07 Sxxx 1656 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Dokumente und Einstellungen\xxx\Anwendungsdaten\Mozilla\Firefox\Profiles\elqxxx.default\FlashGot.exe" file.

I'm sure its a false alarm, or not?


Haha, I just started my own thread about this, must have been writing it at the same time as you. Running the exact same setup, avast! 4.8 and virus database from today VPS090718-0. It's most likely a false positive :)
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1) Gecko/20090624 Firefox/3.5

mosfet92

Re: Avast! thinks flashgot.exe is a virus?

Post by mosfet92 » Sat Jul 18, 2009 6:56 pm

Hello

I have exactly the same problem
Avast is reporting a trojan when trying to update to version 1.1.9.8
Stopped avast a few moment ( ... ) to allow update
But when I firefox restarted, I got the trojan alert again ; I moved the exe file to quarantine

Emmanuel
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

Dinosaur

Re: Avast! thinks flashgot.exe is a virus?

Post by Dinosaur » Sat Jul 18, 2009 7:05 pm

I've uploaded the quarantined file to Jotti ..this is what I got

File size: 167376 bytes
Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: 240374614cb0ef142dad6c6dcbab699e
SHA1: b4b95e0c579dc72811faea72fae50b9bdbaf8811
Filename: FlashGot.exe
Status: Scan finished. 2 out of 21 scanners reported malware.
Scan taken on: Sat 18 Jul 2009 20:38:47 (CET)

Both GDATA and Avast! detected malware ....similar definitions files I would think.

http://virusscan.jotti.org/en/scanresul ... 0cce1bd4ce
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1) Gecko/20090624 Firefox/3.5

goodrichm

Re: Avast! thinks flashgot.exe is a virus?

Post by goodrichm » Sat Jul 18, 2009 7:28 pm

Same thing started happening to me Today after Avast updated its virus definitions. Has anyone just ignored the alert and still using flashgot with no problems? MG
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20

User avatar
Giorgio Maone
Site Admin
Posts: 8733
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Avast! thinks flashgot.exe is a virus?

Post by Giorgio Maone » Sat Jul 18, 2009 7:46 pm

The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

User avatar
Giorgio Maone
Site Admin
Posts: 8733
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by Giorgio Maone » Sat Jul 18, 2009 7:46 pm

The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

zokocx

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by zokocx » Sat Jul 18, 2009 8:21 pm

I have false positive too ,same Avast 4.8 and some virus database.
It is not 1st time for Avast to report false positive, i need to find better antivirus protection.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5

User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3339
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by GµårÐïåñ » Sat Jul 18, 2009 8:22 pm

Avast is prone to false positives, nothing new. Get a better AV or write them and tell them they got overzealous once again. Despite the fact that I have 100% faith in Giorgio, I put the file through our company's array of 26 industry standard AV engines that we use for benchmarks and testing and ONLY Avast popped. What does that tell you?
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1

aney1

Re: Avast Home 4.8 Antivirus -> Trojan in flashgot.exe

Post by aney1 » Sat Jul 18, 2009 8:23 pm

Problem solved!
Just update your VRDB.
Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)

goodrichm

Re: Avast! thinks flashgot.exe is a virus?

Post by goodrichm » Sat Jul 18, 2009 8:35 pm

As aney1 said, Avast! just published a new virus definition to fix this problem. Life is good once again...

http://forum.avast.com/index.php?topic=46897.0
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20

Dinosaur

Re: Avast! thinks flashgot.exe is a virus?

Post by Dinosaur » Sat Jul 18, 2009 8:59 pm

Giorgio Maone wrote:The FlashGot.exe executable is signed, and it's some months old.
Just check the signature (from InformAction) and you're set.
It's a 100% AVAST false positive (my local copy triggers AVAST as well).
Please report as such like I did.


Thank you Giorgio for your fast response. And to you too MG/goodrichm for posting it to the Avast! forums :) Updated the defs, no more problems ;)
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1) Gecko/20090624 Firefox/3.5

User avatar
therube
Ambassador
Posts: 7458
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Avast! thinks flashgot.exe is a virus?

Post by therube » Sun Jul 19, 2009 2:10 pm

Luntrus or others, could you make note in that thread that they are also talking about two separate programs.

One being FlashGot, a Mozilla extension, the other being FlashGet, a download manager.

They are totally separate items. (Though one does facilitate the usage of the other.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.1pre) Gecko/20090716 SeaMonkey/2.0b1pre

Post Reply