Virus alert after last update ???

Hi,

Today i get the virusupdate “0643-5” and the programversion “4.7.892” after the restart of my PC, Avast tell me that i have an Trojan on my Computer. He say Notepad.exe is infected and the dllchache notepad.exe or so.

So i let him remove it to the container. After that i go to Jottipage there i let test the 2 files again but only Avast found there the virus all other say – nothing found. –

So, now im thinking thats maybe an false alarm of avast. What do you think?

Ahh avast exactly say :
Sign of “Win32:Qqpass-DY [Trj]” has been found in “C:\WINDOWS\system32\notepad.exe” file.
and
Sign of “Win32:Qqpass-DY [Trj]” has been found in “C:\WINDOWS\system32\dllcache\notepad.exe” file.

Greetz
Black Sheik

Hi,

Exact same problem. I took my (original) XP pro CD and searched for notepad.ex_ and let avast! scan the file.

SAME PROBLEM. Guess a little bug in the latest database?

Greetz: SanTM…

So am I!! I think it is an error report!!!

:frowning: >:( >:(
Noooo… I’ve the same problem! 2 PCs on different networks were updated and immediately alert about this infection. I think there is a bug into latest updates, so please let us know about it…
I hope technical support will reply us soon to receive a confirmation about this problem.

TurboZag

??? ??? ???

Have the same probl. on all my pc’s…

Can AVAST make a statement plz.???

I wonder why they don’t test the virus definitions with Windows files before to release an update… >:(

http://img55.imageshack.us/img55/6546/notepadbf0.png

…same too!

  • notepad.exe
  • old18.tmp
  • system volume information…xxx.exe

…all with the same trojan… on XP Home & Prof.!

MfG, Trixter

Which language version of Windows are you using?
Can you please send the file in question (notepad.exe) to my email address?

Thanks
Vlk

My OS is Windows XP Professional Italian 5.1.2600 Service Pack 2 build 2600.

I’m going to send you notepad.exe to your e-mail address, zipped and renamed in .123 , please let me know soon…

TurboZag

Here the same problem. Using Windows XP Pro SP2 Dutch, with VPS 0643-5 dated 26.10.2006…Havent tried a clean still, but will do that later tonight…

Did you receive the notepad.123 attachment? Let me know, please…
TurboZag

Same with Windows XP Pro Sp2 german

No detection with latest VPS update 0643-5 XP Pro, English version.

Also using Windows XP Pro SP2 Dutch, with VPS 0643-5 dated 26.10.2006…

Got the file, thanks…
A new VPS update fixing this should be released in ~half an hour…

Thanks, sorry for the trouble! :-\

Vlk

same version, same problem here
i’ve 2 computers with this version and after i’ve updated Virus DB i got the error…
problem with database?
bye

Same problem, XP Pro Italian SP2, VPS 0643-5 updated today.

Hi VLK :slight_smile:

So you can ignore my E-MAil with the File. ;D

And thnx for the fast reaction.

Greetz
Black Sheik

Guys, no need to post anymore, problem has been acknowledged and is being worked on.

Thank you
Vlk

Same here. It’s probably just a typo in the latest library, since avast thinks the notepad.exe is the old notepade.exe that the old QQpass trojan used to create.
If you tried to let avast quarantine or delete the notepad.exe file, you’ll probably find that you’ll cant open the notepad form the exe under \windows\ even with avast shutted down from the task manager.
To solve that issue before the next library update and fix, you’ll just need to overwrite that notepad.exe with another, working one, and, of course, leaving avast processes closed in the meanwhile.