avast just idetified it's own file as trojan

Viruses and worms
1

so avast just notified me about a trojan found. see attachment for yourself

2

Me too!

http://www.avast.com/de-de/lp-fr-virus-alert?p_ext=&utm_campaign=Virus_alert&utm_source=prg_fav_90_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fde-de%2Fvirus-alert-default&p_vir=Win32:Downloader-TJK%20[Trj]&p_prc=C:\Program%20Files\AVAST%20Software\Avast\AvastEmUpdate.exe&p_obj=http://files.avast.com/files/emupdate/20131217.exe&p_var=.%2Ffa%2Fde-de%2Fvirus-alert-default&p_elm=7&p_lex=310&p_lid=de-de&p_lng=de&p_lqa=0&p_lqe=0&p_lst=0&p_lsu=24&p_pro=0&p_bld=empty&p_vep=9&p_ves=0&p_vbd=2006&p_hid=58e8eeca-b33a-4f4f-8b25-aae3ce6280e4

3

Me Three:

Object: http://files.avast.com/.../20131217.exe
Infection: Win32:Downloader-TJK[Trj]
Process: C:\Program Files.…\AvastEmUpdates.exe

4

Likewise. A quick scan returned negative results.

At the time I was reading a forum and hadn’t performed any action in several minutes other than scrolling the page down when the notice came up.

Here’s the URL the notification sent me to:

http://www.avast.com/en-us/lp-fr-virus-alert?p_ext=&utm_campaign=Virus_alert&utm_source=prg_fav_90_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_vir=Win32:Downloader-TJK%20[Trj]&p_prc=C:\Program%20Files\AVAST%20Software\Avast\AvastEmUpdate.exe&p_obj=http://files.avast.com/files/emupdate/20131217.exe&p_var=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_elm=7&p_lex=120&p_lid=en-us&p_lng=en&p_lqa=0&p_lqe=0&p_lst=0&p_lsu=24&p_pro=0&p_bld=empty&p_vep=9&p_ves=0&p_vbd=2006&p_hid=60080564-0e61-4478-a460-1ef5447e6b53

5

Yep, I got it too. WebShield.txt lists this:

12/17/2013 3:01:53 PM http://files.avast.com/files/emupdate/20131217.exe [L] Win32:Downloader-TJK [Trj] (0)

So…infection on the server, or false positive? ::slight_smile:

6

this also just happened 2 me should i be worryed? :‘( :’( :‘( :’(

7

Can confirm I also got this.

Virus Total Analysis
https://www.virustotal.com/en/url/c01334bad78878f2e1478d173b65d4ce680438e31c3168c73d144e7c39418f4b/analysis/1387318473/ shows this one as a false positive.

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=files.avast.com (Google is saying its clean)

Sitecheck seems O.K.
http://labs.sucuri.net/?blacklist=files.avast.com

8

NO … will soon be fixed

9

I don’t think so. If someone had actually compromised Avast’s servers I can’t imagine they would use anything but a 0-day exploit which the Avast software would be unlikely to catch. Most likely someone at Avast made an error that the software disliked.

10

I just got the same thing on my laptop and my daughter on her desktop.

11

Response from avast ‘lukor’

12

Just forced an update a few minutes ago, no error. Either it’s been fixed, or the update pulled.

13

I got this twice. I ran Malwarebytes and everything seems fine

should i just update Avast?

14

Something’s up. Not only did I get the infection alert but Windows said my Avast got turned off. It’s back on now.weird

15

It may have been pulled whilst working on it.

Not sure what update you are talking about, if a manual program update, whilst it may not report an error, it should complete and report, A) you have the latest version or B) proceed to downloading the update ?

16

Seems to be fixed. I received the same error earlier. Just forced a manual update and it downloaded a bunch of files and asked for a reboot. I’m now on v 2014.9.0.2011.

Would be nice to get official confirmation and some sort of explanation. That error earlier pushed my paranoia meter into the red! :slight_smile:

17
Would be nice to get official confirmation and some sort of explanation. That error earlier pushed my paranoia meter into the red!

http://forum.avast.com/index.php?topic=142972.msg1036823#msg1036823

18

Thank ya much-just got the latest updates as well :smiley: