In 6+ years of using Avast antivirus software I’ve received one definite false positive result was the Avast Win32:Delf-MZG [Trj] Trojan Warning for a SpyBot Search and Destroy file!
It was a tad disconcerting to say the least :-)
It was 3:30am in the morning and I was just about to shut my PC down for the night and go to bed, (why is it tech things seem to go wrong at time when you are completely exhausted!) when I received the following virus warning from Avast antivirus software:
C:Program FilesSpybot – Search & DestroySDHelper.dll
Win32:Delf-MZG [Trj]
Trojan Horse
091203-0, 03/12/2009
As soon as I realized it was SpyBot Search & Destroy I almost crapped my pants in panic! If that’s infected it must be a really BAD virus infection!!
Avast wouldn’t delete the file because it’s running and after scanning the Spybot – Search & Destroy folder with Avast I got multiple warnings of the same Win32:Delf-MZG [Trj] trojan virus infection!
By now I’d already disconnected the PC from the Internet and was quickly closing all programs down including Spybot – Search & Destroy.
Avast False Positive Warning?
I took a step back and thought how the heck has Spybot – Search & Destroy become infected with a Trojan like Win32:Delf-MZG [Trj]?
Looking at the files that are supposedly infected they have old dates, suggesting they’ve not been edited recently.
I reconnected the Internet and searched Win32:Delf-MZG [Trj] and found multiple pages about this, looks like it’s an Avast false positive, phew thank God for that!
My PCs have not had a virus infection for over 10 years, last one was when I first got into PCs and I didn’t run AV software and had a PC (a 486 :-)) infected with the Chernobyl virus that damages your PC on the anniversary of the Chernobyl accident, I found it 2 days before the anniversary!
Looks like Avast has screwed up it’s virus database, the forums I’m looking at are loading so slowly looks like their servers are struggling to keep up with people like me looking for answers as to what’s gone wrong with Avast!
If you get hit with the problem as I understand things you should not delete the files or add them to the vault/chest, because It will mess up those programs.
I’m going to sleep now and hope when I Wake up in the morning Avast has fixed it’s virus database. If not I’ll uninstall it and find an alternative AV scanner.
Now it’s past 4am and I really need sleep, stupid Avast!
Avast False Positive Fix
Update: I’ve had a good nights sleep and woke to find confirmation it’s a false positive https://forum.avast.com/index.php?topic=51647 and Avast has updated and no longer reports Spybot Search and Destroy as infected on the PC I had a problem with.
Hoping no one reading this messed up their PCs in a panic?
David
Website - SEO Gold
Avast False Positive Fix
Yes, I’ve been through the same as you this night and, from what it seems, Avast has fixed the missunderstanding. I hope nothing has stopped working… Thank you deeply for your helpful post!
Avast False Positives
Yes and its for many other exes and dlls as well, such as a particular dll in the IZArc Program folder and new installers. :@
Avast Real Time Protection False Positive
Is this really a false positive alert? This morning I got lots of alerts for Win32.delf-mgz, a little bit after update AVAST virus definition datebase, I started my virtual machine that also alarmed (the virus definition database wasn’t up to date on that, just updated yesterday evening on that machine.) I tried to get a delf remover from avast website, and it said for the remover it is infected!!!
Before that I listened to music on AIMP and it said bass.dll is infected by win32,delf-mgz. I disabled Avast!’s real time protection then I ran ESET’s remover tool, it didn’t find anything.
What can I do?
Avast Real Time Protection False Positive
Avast Trojan Warning fix
I’m having the same problem, though I hd actually panicked and thought the trojan was loading bogus files into my program (had a trojan that did this before) and moved them to the chest, effectively ruining Spybot. Now I can’t get Spybot to uninstall and reinstall, and Avast won’t leave the thing alone.
Hoping someone comes up with a solution.
Avast Win32:Delf-MZG False Positive
Hello,
last night, avast had a bad false positive issue. At around 12:15am GMT we released VPS update 091203-0 which started flagging hundreds of innocent files as a “Win32:Delf-MZG” Trojan (or, in less common cases, as “Win32:Zbot-MKK”). Among the files affected were high-profile programs produced by Adobe, Realtek sound card drivers, various media players etc.
We are still investigating the issue, trying to find out what exactly happened and how to make absolutely sure it will not happen again.
At 5:50am GMT, another VPS update (091203-1) was released, fixing the issue (for both “Win32:Delf-MZG” and “Win32:Zbot-MKK”).
Those who have not used their computers between 12:15am and 5:50am will most likely not be affected.
If you’re still using the bad VPS (091203-0) we recommend to invoke a VPS update immediately.
Our technical support team is currently preparing extensive HOWTOs about how to fix the situation for those who were hit by the problem.
We will be updating you shortly.
We deeply apologize for any inconvenience this has caused.
Thanks,
Vlk
Here is a step-by-step guide on how to restore the files from the Virus Chest: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=376
It’s worth noting that even after the files get restored, they will still stay in the chest (i.e. restoring is like copying, not moving). So don’t let this confuse you.
Copied from Avast Forum (original article no longer online).
Avast Win32:Delf-MZG False Positive
Avast Update
Well, i was trying to play some game when avast simply deleted the door to it, i got so scared… installing again the whole game?
My computer was infected since when!!!?
I just turned off avast and copy pasted the shortcut to the game from a friends PC… well, at least it has been fixed, i just realized that my avast wasnt updated…
Avast Pro Anti-Virus Software Broke Skype
I had this happen when my girlfriend left the computer on during the night and she was logged into Skype.
My computer started sounding the alarm that someone or something was trying to load the Trojan through the Skype program. I shut off my computer and ran all my anti-virus programs ( Avast Pro ) being one of them.
I placed the file in the chest and every since then we have not been able to log into Skype. I have uninstalled and re-installed Skype several times now with no luck. I have now deleted the Trojan file from the chest and will see it that will fix my Skype problem after I go back and re-install that again.
I hope it works…..I’ve been pulling out what hair I have left for the last 7 days.
Avast Pro Anti-Virus Software Broke Skype
Anti-Virus Software
I hate viruses and all of us very well know it’s a gigantic way for the internet criminals, however there is different side to the story too. Thousands are spent every week and repairing for PC’s. Many spywares out do anti-virus softwares too. Superb topic dude.