False positive of Win32:Ircbot-BG [Trj]

Viruses and worms
1

FlashPaste.exe setup file is being detected as infected by Win32:Ircbot-BG [Trj]
It’s a false positive. File already submitted by email for analysis and correction.

Virus has been detected!
File Name: FlashPaste.exe
FileID: 393
Virus Description: Win32:Ircbot-BG [Trj]

2

I think there is a false positve by firetune.exe too.

Sign of “Win32:Ircbot-BG [Trj]” has been found in “I:\Firefox\firetune\FireTune.exe” file.

http://www.totalidea.com/freestuff4.htm#down

3

What version of firetune do you have, mine is 1.0.0.6 and no problem.

4

I have 1.0.6 and don’t have problem.
The setup (install file) is clean too.
Which VPS avast! version are you using?

5

FireTune 1.0.7 released 09/27/05 (see Link) - 1.0.6 is clean

/edit

VPS 0539-4

6

Well stranger still, I downloaded the 1.0.7 version of firetune it took several attempts using several different download mirrors but I eventualy managed to download it. I scanned the installer firefox.exe file and no warnings at all.

I tried to install it to see what would happen when it was installed (unpacked) and all I kept getting was a CRC error.

Will have to download again and reinstall firetune 1.0.7 or revert to 1.0.6.

7

I only use the Zip-Version of FireTune.

http://www.mrpink.de/waste/firetune.gif

8

Well I managed to get it to download and avast alarmed even before completion (on the partial download file of Star Downloader) of the download this time. So strange that two different download sources and two different outcomes.

Same outcome installer or zip by the look of it.

Edit: I have sent it to avast!

9

Now I downloaded the Installler-Version from mirror 4, same Virus-Notification after scanning.

10

I would stick with 1.0.6 for the time being and periodically scan the file from within the virus chest. When the VPS is updated it won’t detect the file, then you can restore it from within the chest and install.

11

Yes David, I think this is currently the best solution.

12

This has now been resolved with the latest VPS update 0539-6, so you should be ok now.

13

Confirmed, is fixed with the new VPS 0539-6.

Thanks David for the info and thanks Avast for the quick fix.

14

No Problem, a belated welcome to the forums.

15

Fixed in latest VPS 0539-6
Thanks Alwil team, this was really fast 8)