<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>My DigitalZone &#187; False positive</title>
	<atom:link href="http://mydigitalzone.net/tag/false-positive/feed/" rel="self" type="application/rss+xml" />
	<link>http://mydigitalzone.net</link>
	<description></description>
	<lastBuildDate>Fri, 15 Jan 2010 04:34:05 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>AVAST Detecting Win32:Delf-MZG</title>
		<link>http://mydigitalzone.net/2009/12/02/avast-detecting-win32delf-mzg/</link>
		<comments>http://mydigitalzone.net/2009/12/02/avast-detecting-win32delf-mzg/#comments</comments>
		<pubDate>Thu, 03 Dec 2009 04:29:51 +0000</pubDate>
		<dc:creator>Jenny</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Avast!]]></category>
		<category><![CDATA[False positive]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://mydigitalzone.net/?p=470</guid>
		<description><![CDATA[<style type="text/css">
<!--
.nmstitle {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 13px;
	text-transform: capitalize;
	color: #003333;
}

.nmsdesc {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 12px;

	color: #003333;
}
-->
</style>



Ah.  The annoyance started about 30 min. ago.  AVAST!, Malwarebyte&#8217;s excellent software for detecting/removing malware, started to detect tons of tons of trojans, especially Win32:Delf-MZG, like crazy.  I took it seriously and started a full scan.  Then, it recommended to do a memory scan after a reboot.  I did it. [...]]]></description>
			<content:encoded><![CDATA[<style type="text/css">
<!--
.nmstitle {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 13px;
	text-transform: capitalize;
	color: #003333;
}

.nmsdesc {
	font-family: Verdana, Arial, Helvetica, sans-serif;
	font-size: 12px;

	color: #003333;
}
-->
</style><p id="top" /><script type="text/javascript"><!--
google_ad_client = "pub-2241621611203959";
/* DZone_posts336x280, created 1/2/09 */
google_ad_slot = "2956728885";
google_ad_width = 336;
google_ad_height = 280;
//-->
</script><br />
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></p>
<p>Ah.  The annoyance started about 30 min. ago.  AVAST!, Malwarebyte&#8217;s excellent software for detecting/removing malware, started to detect tons of tons of trojans, especially Win32:Delf-MZG, like crazy.  I took it seriously and started a full scan.  Then, it recommended to do a memory scan after a reboot.  I did it.  I chose to remove all the suspicious ones.  I think it detected over 30.  Most of the files were audio/video-related.  Some dlls for SUPER (video conversion software) and GoldWave (audio editor).  </p>
<p>I took a note &#8230;. Win30: Delf-MZG&#8230;. did a google search after the reboot.  It sounds like it&#8217;s the update from AVAST! has some problem.  Some people started to discussed it about an hour ago over at <a href="http://answers.yahoo.com/question/index?qid=20091202191236AA96njt">Yahoo Answers</a>, and one poster suggested to go to the AVAST user forum.  Overall, it sounds like a lot of them are just false positives but I&#8217;ll keep an eye on it.  I&#8217;m heading to the AVAST/Malware bytes&#8217; site right now.</p>
<p>It&#8217;s really annoying.  It&#8217;s happening for many people today, Dec. 2nd, 2009 at around 10 p.m., U.S. Central time.</p>
<p><strong>Update</strong><br />
Guess it was too late.  It looks like all of the alerts were false positive.  See <a href="http://win32delf-mzg.blogspot.com/2009/12/win32delf-mzg.html">this</a>.  I tried to use GoldWave and Super but they didn&#8217;t work because I chose to delete suspicious files.  The deleted files are not in the recycle bin, so I need to reinstall those programs.  So far, my laptop itself is working fine.</p>
<p><strong>So, ignore the AVAST warnings and take NO action.  Do not choose to delete files!</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://mydigitalzone.net/2009/12/02/avast-detecting-win32delf-mzg/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
