Author Topic: Avast! (Free) Update Brings False Positive  (Read 1180 times)

Offline Mister2

  • Global Moderator
  • Gold Member
  • Posts: 2385
Avast! (Free) Update Brings False Positive
« on: December 02, 2009, 11:21:38 PM »
Avast 4.8.1368 update applied this morning immediately showed Soundman.exe as containing a trojan.

This file (located in the C:\Windows folder) is the Realtek sound manager and the Avast warning is a False Positive.  Removing/quarantining this file will have a serious effect on the sound capabilities of a computer.

If in doubt, submit the file to www.virustotal.com for a second opinion.

This matter has been reported to Avast!
Never stop learning - visit the SpywareHammer Knowledgebase

Offline ky331

  • Dell Community Colleague
  • Dell Support Group
  • Bronze Member
  • Posts: 366
  • Rascal & Biscuit
Re: Avast! (Free) Update Brings False Positive
« Reply #1 on: December 03, 2009, 06:19:17 AM »
The following has been copied/pasted from http://forum.avast.com/index.php?topic=51647 :

last night, avast had a bad false positive issue. At around 12:15am GMT we released VPS update 091203-0 which started flagging hundreds of innocent files as a "Win32:Delf-MZG" Trojan (or, in less common cases, as "Win32:Zbot-MKK"). Among the files affected were high-profile programs produced by Adobe, Realtek sound card drivers, various media players etc.

We are still investigating the issue, trying to find out what exactly happened and how to make absolutely sure it will not happen again.

At 5:50am GMT, another VPS update (091203-1) was released, fixing the issue (for both "Win32:Delf-MZG" and "Win32:Zbot-MKK").
Those who have not used their computers between 12:15am and 5:50am will most likely not be affected.


If you're still using the bad VPS (091203-0) we recommend to invoke a VPS update immediately.


Our technical support team is currently preparing extensive HOWTOs about how to fix the situation for those who were hit by the problem.


We will be updating you shortly.

We deeply apologize for any inconvenience this has caused.

Offline Mister2

  • Global Moderator
  • Gold Member
  • Posts: 2385
Re: Avast! (Free) Update Brings False Positive
« Reply #2 on: December 03, 2009, 06:54:51 AM »
Thanks for the info - all working fine now! ;D
Never stop learning - visit the SpywareHammer Knowledgebase