*
Pages: [1]
  Print  
Author Topic: Avast Virus Killer - The New Virus???  (Read 254 times)
EG NeoMorph
Shepard Clone
EG Orbital Drop Shock Trooper

XBL: EG NeoMorph
AKA: The Angry Old Git, RoachMotel (sucks in bugs)

Offline Offline

Achievements:
EG Founder
Posts: 3058


He who lives by the sword has a sharp neighbour.


WWW
« on: December 03, 2009, 03:50:24 AM »

Well tonight my virus killer actually killed my home automation server... by labeling loads of things as a virus and quarantining them. This has meant that it has killed a lot of the functionality of my server.

I'm not the only one either... Do a search on "delf-MZG" and you will see a LOT of people have been affected. It turns out that the latest virus signature file is somewhat busted which left loads of false positives being reported.

I nearly reformatted my hard drive at one point I was getting so many virus reports.
Logged

You are not allowed to view images.
Please register or login
 
CAT - Awesome TV Listings Calendar Site Linky
"If God meant us to use third person he would have stuck our eyeballs on stalks behind our head!"
Damn, I'm depressed HELP ME, I'M STUCK IN A SIG FACTORY!!!!
EG NeoMorph
Shepard Clone
EG Orbital Drop Shock Trooper

XBL: EG NeoMorph
AKA: The Angry Old Git, RoachMotel (sucks in bugs)

Offline Offline

Achievements:
EG Founder
Posts: 3058


He who lives by the sword has a sharp neighbour.


WWW
« Reply #1 on: December 03, 2009, 02:24:08 PM »

Well it looks like they caught on quick... There are a LOT of pissed off users out there...

Quote
Issue
On Thursday 3.12. 2009 avast! had a bad false positive issue. At around 12:15 AM GMT we released VPS update 091203-0 which started flagging hundreds of innocent files as a 'Win32:Delf-MZG' Trojan (or, in less common cases, as 'Win32:Zbot-MKK). Among the files affected were high-profile programs produced by Adobe, Realtek, sound card drivers, various media players etc.

Solution
On Thursday 3.12. 2009 at 5:50 AM GMT, another VPS update 091203-1 was released, fixing the issue (for both 'Win32:Delf-MZG and Win32:Zbot-MKK). If you're still using the bad VPS 091203-0 we recommend to invoke a VPS update immediately.

I bet they lost a LOT of customers over this because it totally killed some peeps machines because it locked out essential operating systems files causing the whole PC to lock up solid. You had to boot into safe mode, try to restore the quarantined files and hope for the best before uninstalling Avast. I was lucky... I smelled a rat and disabled the thing and checked online before going ahead with a full restore.
Logged

You are not allowed to view images.
Please register or login
 
CAT - Awesome TV Listings Calendar Site Linky
"If God meant us to use third person he would have stuck our eyeballs on stalks behind our head!"
Damn, I'm depressed HELP ME, I'M STUCK IN A SIG FACTORY!!!!
Skud Missile
Squire


Offline Offline

Posts: 326

Can I Help You???


« Reply #2 on: December 03, 2009, 08:09:25 PM »

They're not the only AV company to make a HUGE **** up with the signature defs - I use computer associates and a few months back they decided that a load of service pack 3 windows files were a virus and quarantined them, causing the PC to go into safe recovery mode where it says files have been modifed and asks for the windows disc to replace them.
That wouldn't be so bad IF it wasn't asking for my service pack 3 disc which didn't exist at that point as I'd installed on SP2 and upgraded to SP3 - DUH!
It took them well over 24 hours with their forums lit up blue like a christmas tree with pissed off users......
Meanwhile their best advice was to "disable realtime scanning" - I kid you not!  Shocked - No fecking way am I gonna do that, luckily disabling the dumbass hueristics scanner cured it till the update was released.
They also decided a couple of keygens I've had for years were suddenly some new virus and only fixed it when I sent a sample in which first got me an automated reply saying it was malicious until someone with a brain checked the code out and cleared it as safe.
Ironicly that cured both keygens even though I only sent in one - They were both by the same cracker so I guess it was just something in his coding they didn't like!
Logged

Skud Missile

Assumption is the mother of all feck ups!!!

You are not allowed to view images.
Please
register or login
EG NeoMorph
Shepard Clone
EG Orbital Drop Shock Trooper

XBL: EG NeoMorph
AKA: The Angry Old Git, RoachMotel (sucks in bugs)

Offline Offline

Achievements:
EG Founder
Posts: 3058


He who lives by the sword has a sharp neighbour.


WWW
« Reply #3 on: December 03, 2009, 08:49:28 PM »

Hehe... it was only turning off realtime scanning that let me do anything on my server. Took ages to get the thing fixed. In the meantime I installed Microsoft Security Essentials to hold up the fort until Avast got fixed. As soon as it was I got rid of MSE as it was a load of crap due to it pushing my bloody cpu to 100% constantly. With Avast running I coast along at 18% cpu (this is the server that runs my home automation).

The annoying thing was that I had just finished fixing a bug with my bloody PDA that showed it had 0% battery when in fact it was 100% full. It meant that I couldn't power the darn thing on without connecting it to the mains. Ironically I have been trying to code up a new Netremote panel for my new PDA for over 48 hours and keep getting sidetracked with things going wrong.

NeoJinxed for sure...
Logged

You are not allowed to view images.
Please register or login
 
CAT - Awesome TV Listings Calendar Site Linky
"If God meant us to use third person he would have stuck our eyeballs on stalks behind our head!"
Damn, I'm depressed HELP ME, I'M STUCK IN A SIG FACTORY!!!!
Pages: [1]
  Print  
 
Jump to:  

Recent

TinyPortal v1.0 beta 4 © Bloc
Page created in 0.32 seconds with 35 queries.