Avast found a "Trojan" but it is the signature of a spyware PlugIn of Agnitums F

Avast Free Antivirus / Premium Security
1

Hello everybody,
after scanning my drives there was a Trojan alarm. The signature of the Spyware Plug-In of my Agnitum Outpost Pro Firewall 3.5 First I moved into the chest (take a look in chest report under 00004)but returned it back the plug-in don’t wanted start again.
My questions are now:

  1. Am I right, when I say: for the next search I have to put the file into a ignore list?
  2. Whats about the three first items in the list?

Thanks and cheers mates
pocahontas

Chest entry:

<?xml version="1.0" encoding="UTF-8" ?>
  • 00000005 3159058
  • 00000001 1092160800 kernel32.dll C:\WINDOWS\system32 System 1140726268 1057280
  • 00000002 1092160800 winsock.dll C:\WINDOWS\system32 System 1140726268 2864
  • 00000003 1092160800 wsock32.dll C:\WINDOWS\system32 System 1140726268 24576
  • 00000004 1139322616 spy5_main.sdb C:\Programme\Agnitum\Outpost Firewall\Plugins\AntiSpyware Win32:DyfucDldr-AC [Trj] Vir yes 1141588394 2074314
2

Strange, I also have OP 3.5 and there is no trojan alarm on scanning with my Avast Pro. Which PlugIn exactly?

3

this link might answer your question. :wink:
http://forum.avast.com/index.php?topic=19580.msg164706#msg164706

4

The anti-spyware plug-in, which if you have AdAware (which it is based on) or any other anti-spyware combo it is a waste of CPU time (IMHO), on boot it accesses in excess of 1000 files which can depending on your avast settings slow your boot times as avast scans these accessed files.

I really want my firewall to concentrate on the main task blocking unauthorised inbound/outbound access to/from my system and not grow into some bloated suite trying to be all things to all men.

5

Hi to all!

Thank you for your advice, especially Cloussau! I’m going to put the file in the ignore list and get a new definition file as soon as my laptop has access to the internet again.

But whats up with this part, was it right to the files into the chest?

Chest entry:

<?xml version="1.0" encoding="UTF-8" ?>
  • 00000005 3159058
  • 00000001 1092160800 kernel32.dll C:\WINDOWS\system32 System 1140726268 1057280
  • 00000002 1092160800 winsock.dll C:\WINDOWS\system32 System 1140726268 2864
  • 00000003 1092160800 wsock32.dll C:\WINDOWS\system32 System 1140726268 24576

What are they originally for?

Kind regards
pocahontas