Avast! 4.7! warns MATOUSEC firewall test 

system · 2007-12-02T13:05:46.000Z

Hi :

I tried to test my firewall in the www.matousec.com site, but when I try my firewall it alerts me about a discovered virus :

30/11/2007 7:36:56 SYSTEM 1500 Sign of “Win32:Trojan-gen {VC}” has been found in “http://www.matousec.com/downloads/windows-personal-firewall-analysis/leaktests/Thermite.zip\Thermite\thermite.exe” file.

In other forum someone told me that it was a false positive, but in all the tests appears the same trojan??, Even I tried to download the “All in One” test but in the middle of the process Avast! warned me, beside that it aborted the download

Any ideas???

P.D By the way I’m a happy user of Avast!, so I send my congratulations to the developement team!!!

FreewheelinFrank · 2007-12-02T13:12:39.000Z

Tools used to “smuggle” data out past a firewall can be used by Trojans to steal personal information. There’s no way for avast! to distinguish between testing and malicious use.

DavidR · 2007-12-02T15:09:25.000Z

As FWF said this is a common issue, I have a number of tools to check for firewall leak test and most of them avast detects as it has no idea the intent/circumstances of use. I’m sure if you happen to look on the matousec site it may even mention that some anti-virus applications may detect these as malware.

So it isn’t truly a false positive as a tool can do good or evil, perhaps the malware name could do with a revision as there are a number of such tools that have the suffix [Tool] on the malware name.

Dwarden · 2007-12-02T18:28:34.000Z

it’s detected by generic signature … isn’t that exactly what You await to happen (aka Avast! notices it

system · 2007-12-02T19:41:41.000Z

Thanks for your answers, I feel very protected by this aewsome antivirus

Regards

Miguel AngelXP

Announcements