Topic: AVG reports a Trojan
started by: FrodoHobbits
Posted by FrodoHobbits on Oct. 17 2010,03:00
Running:Win 7 Pro x64
AVG Free 2011
Scanner reports a trojan with one of your language files.
See attached screen dump.
Posted by BoyFrary on Oct. 19 2010,08:50
I just signed up to inform you of the same thing. I'm on the paid for Business version of AVG.File Name: C:\Program Files\UltraISO\lang\lang_br.dll
Threat name: Trojan horse BackDoor.Ircbot.NLH
Windows 7
Virus DB: 422/3206
AVG version: 10.0.1136
Possibly a false positive.
Edit: Added the AVG Resident Sheild Alert image.
Posted by xoben on Oct. 24 2010,20:41
We are sure that all files from us are virus free. Some antivirus tools may report error messages by mistake.
Posted by midas on Oct. 30 2010,03:18
working with AVG now to get this resolved
Posted by Master Cylinder on Oct. 30 2010,12:22
Yes, all my machines with AVG 9 are picking up:lang\lang_my.dll Trojan Horse BackDoor IrcBot.NMM
lang\lang_tw.dll Trojan Horse BackDoor IrcBot.NMN
It took me two hours of testing before I verified that the detection comes from the newly installed files! Ugh...
In the past, I also got a detection on
lang\lang_br.dll
I thought that was a real virus... I deleted UltraISO 9.36 and reinstalled. I then no longer had the issue with AVG 9. Unfortunately, that is no longer the case with this detection.
Seems UltraISO runs fine with additional language files missing... I think you can simply delete language files you do not need - which seem to be the offending source...
I have written EZB Systems Support on this last night (2AM). Good to know you are on top of it. Still, I am very curious - what in your code is being picked up at a virus???
