Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Grifo_Strafe]

Hi guys,
I just start my IL2 and my Avast found trojan on wrapper.dll and in my freetrack.exe.

Anyone has this issue too?

[SAS~CirX]

my wrapper.dll is fine. what is freetrack?

[neuro]

Freetrack is a freeware program that lets you use a cheap-o webcam and home made array of visible or infrared LED as a head tracker. You have to build your own set of LEDs but you only spend the money of 4 LEDs and a heap webcam ($20?) instead of the $200 TrackIR. It's the usual "if you have the money, you dont have to do the work, and if you do the work you dont need to spend thee money"

Anyhow, I just scanned the wrapper.dll and avast DID in fact detect a trojan, using the virus database of 12/03, 2009 (today). I remember readng about a false positive years ago on the Arcade forums, maybe this is the case, again?

[EDIT2] Avast found the same infection in Spybot Search and destroy, which has been reported by other users too, and it's suspected to be a false positive. The search goes on...
Now googling the malware name reported by Avast: Win32:Delf-MZG [Trj]
Notice that we only have Avast reports so far. Any positives from different antivirus software?

[EDIT] my first search results seem to show that this malware is only detected by Avast, and it may be a false positive. But it's too early to tell, I just got started looking for info and im not a Windows malware expert in the first place...
Someone please scan with other software and post results. Also try online scans if you know any trustworthy ones.

[csvousden]

The problem is AVAST antivirus software.  I uninstalled it, and everything went back to normal.  For now I am using an alternate anti-virus and will go back to AVAST when they get there act together.

AAA has a big thread about it.
CV

[neuro]

Well i'm not uninstalling avast for a stupid false positive. It's still by far the best antivirus around (for those poor suckers like us who are forced to run Windows...). Just select 'No action' for now, and when (if) we are sure that it is in  fact a false positive, we can click 'report as false positive' in the malware popup, and they will fix the problem in next avast VDB update.

[EDIT] OK now im almost sure that it is in fact a false positive Have a look at this thread at the Avast forums...

[casey1976]

Strange coincidence...my pal RDDR just ran into the same thing. He was removing an install of IL2 when Avast went nuts. He's doing a complete scan of his machine to be sure.

~KC

[neuro]

You can as well stop the scan and wait for the next VDB update before running it again. Right now it would surely find a lot of issues of that one malware thing. Gove some time for the false positive reports to flow in and the Avast guys to update the VDB, and everything should be back to normal.

[neuro]

OK. Definitely a false positive, reported as such.
The interwebs are full of reports about Avast popping up malware warnings for a trojan called Win32:Delf-MZG [Trj] in a lot of different apps including some very trusted ones. Maybe there is a setting in Avast to whitelist stuff, but in any case im confident that this issue will be fixed with the next update of the Virus DataBase... or the one after that. In the meantime, simply click "no action" when the message appears.
If you try to download something from the internet and Avast blocks it because of this Win32:Delf-MZG [Trj] thing, you can right click on the Avast try icon and select "Disable on-access protection". Download, then re-enable.

NOTE: all these false positive may make a real malware slip through: you get the Win32:Delf-MZG [Trj] a couple of times, then a warning about  a different issue appears and you click "no action" without actually reading the warning, because you thought it was Win32:Delf-MZG [Trj] again. Bottom line: before clicking "no action", always make sure that the warning is actually about Win32:Delf-MZG [Trj].
NOTE2: I got the same warning about the same issue in at least 2 or 3 more programs after wrapper.dll
 

[SAS~Malone]

This is something that slipped into the latest avast update.
They do regular updates, it'll most likely be resolved within the next day or so.

@ i'm with neuro on this one, don't go and change your AV from avast to something else. in my viral experiences (and there have been many!) avast performs way better than any other free AV app out there. Maybe run something else for the meanwhile, but i'm willing to put money on this being resolved within the next 24 hours. 

[SAS~Malone]

hehe...i should've put money on it....seems the latest auto-update has fixed it.
i no longer get the trojan alert running il2. 

[RDDR Hangar19]

Picture this.
 It's around 8.... something last night Pacific.
I'm talking with Casey 1976 on Skype. He is helping me walk through a install of 1.8
 I decided on a clean install of Il2 and was about to remove it from Control Panel.
 I have my desktop speakers on.The little blue Avast box pops up and the news anchor voice says,"Your Avast has now been   
 updated".
 I hit the uninstall on Il2 and all of a sudden multible sirens,virus warnings on everything from boot to SAS,Skype,Il2,wrapper, you name it.   Everything lit up. Remember the Dr Strangelove map board?   the supposed bad guy:  WIN32:DE7F-MZG[Trj]

I let Avast reboot and scan.Told my kid after an hour and a half of watching the blue screen to wake me when it was over.
He woke me up an hr and a half later and windows was back up with seemingly no problems.
 Cleaned the Registry...2,146 errors
Finally got 1.8 in Smooth install..Boot up time now 28 to 30 seconds .
I think removing Avast would be a real mistake false positive or not. I look at what happened last night and thank my lucky stars that it wasn't a expolit. I still think Avast is about the best out there after using a half a dozen other anti virus proggies.
Cheers RDDR