system
1
Hi All,
After installing and updating Avast (free) 4.0.235 VPS-0307-8, it detects the W32.ALCAUL.A4 worm everytime a .Net Framework program executes. Turning off Avast, the program executes fine, otherwise it crashes.
Browsing that .Net program folder, as well as the whole disk C:, Avast does not detect any virus nor worm.
I guess the .Net Framework is confusing Avast, because other antivirus never interfered with such program before.
Any ideas?
Greetings
Heron
Vlk
2
Hmmm, very interesting…
What filename, exactly, does avast give you when reporting the virus?
Is it a file from the .NET framework, or the EXE itself?
And what OS are you using?
Thanks,
Vlk
system
3
My OS is WinXP Prof SP1 with .Net Framework SP1. The program is an independent utility for using as an add-on to MS Flight Simulator. This utility executable needs the .Net Framework environment, as it was written in VB.Net. You can find it in the file “editvp20.zip” searching Google (or I can send it to you).
No need to install it. Just explode the files in a folder and execute Editvoicepack.exe with Avast ON to receive the alarm. You won’t need FlightSim to use it, as it is only a test.
Regards,
Heron
system
4
I forgot to mention the file name detected by Avast:
It is a different DLL file each time the program runs, inside the folder c:\Documents and Settings\myname\Local Settings\Temp\xxxxxxxxx.DLL
Thanks,
Heron
Vlk
5
Indeed an interesting problem.
I managed to simulate it and back up the file - and I passed it to the virus guys for further inspection…
I’ll keep you informed…
Thanks,
Vlk
Vlk
6
Oh yes, you got us here. It was indeed a false positive. Big thanks for pointing this out!!! 
It shouldn’t be shouting anymore starting with the next virus database update, possiblity due tomorrow.
Thanks again,
Vlk
system
7
Thanks for your prompt and kind attention. A thousand points for the Avast crew.
Greetings from Rio de Janeiro,
Heron
