373469 - false positive on Firefox 1.5.0.2/1.5.0.6 on AVG AntiVirus

Status: RESOLVED FIXED

(Tech Evangelism Graveyard :: English US, defect)

Description

[meiypeke]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10

not sure the right place to report but only one I can find:
twice now in the last couple of weeks my virus detector has found a virus in 
"Firefox setup 1.5.0.2.exe"  file B589A63Bd01
I'm concerned about the security of letting the program download now.

Reproducible: Didn't try

Steps to Reproduce:
1.
2.
3.

Comment 1

[Carsten Book [:Tomcat]]

Do you use AVG Free as virus scanner ? 

Can you tell us the name of your anti virus scanner ? 

Comment 2

[Carsten Book [:Tomcat]]

from a mail from [e-mail]:

sorry to be so vague,,,,, I wasn't sure where to report this.
I use AV 7.5 Professional,
 Firefox version 1.5.0.10 :

I scan each morning at start up and twice now it has quarantined the Firefox setup as a virus.
just concerned about what this is.
donna

Comment 3

[Carsten Book [:Tomcat]]

Its a false positive, tested with virustotal.com and its a problem on3 scanner:
Will contact avg,esafe and fortinet

Antivirus	Version	Update	Result
AntiVir	7.3.1.41	03.10.2007	no virus found
Authentium	4.93.8	03.09.2007	no virus found
Avast	4.7.936.0	03.09.2007	no virus found
AVG	7.5.0.447	03.10.2007	Worm/VB.AUG
BitDefender	7.2	03.10.2007	no virus found
CAT-QuickHeal	9.00	03.10.2007	no virus found
ClamAV	devel-20060426	03.10.2007	no virus found
DrWeb	4.33	03.10.2007	no virus found
eSafe	7.0.14.0	03.08.2007	suspicious Trojan/Worm
eTrust-Vet	30.6.3469	03.10.2007	no virus found
Ewido	4.0	03.10.2007	no virus found
FileAdvisor	1	03.10.2007	No threat detected
Fortinet	2.85.0.0	03.10.2007	suspicious
F-Prot	4.3.1.45	03.09.2007	no virus found
F-Secure	6.70.13030.0	03.09.2007	no virus found
Ikarus	T3.1.1.3	03.10.2007	no virus found
Kaspersky	4.0.2.24	03.10.2007	no virus found
McAfee	4981	03.09.2007	no virus found
Microsoft	1.2306	03.10.2007	no virus found
NOD32v2	2106	03.10.2007	no virus found
Norman	5.80.02	03.10.2007	no virus found
Panda	9.0.0.4	03.10.2007	no virus found
Prevx1	V2	03.10.2007	no virus found
Sophos	4.15.0	03.10.2007	no virus found
Sunbelt	2.2.907.0	03.10.2007	no virus found
Symantec	10	03.10.2007	no virus found
TheHacker	6.1.6.073	03.09.2007	no virus found
UNA	1.83	03.09.2007	no virus found
VBA32	3.11.2	03.10.2007	no virus found
VirusBuster	4.3.19:9	03.10.2007	no virus found

Comment 6

[Carsten Book [:Tomcat]]

Fixed -> see Mail from AVG Support:

Dear Sir/Madam,

Thank you for your email.

Unfortunately, the previous virus database might have detected the
virus on some legitimate applications. We can confirm that it was a false alarm. We have immediately released the new virus update that removes the false positive on this application.
Please update your AVG and check your files again.

If you need to restore deleted files from AVG Virus Vault you can do it this way: open AVG Virus Vault (Start -> Programs -> AVG Antivirus -> AVG Virus Vault). Locate the file that was removed, right click on it and choose "Restore File(s)" option.

We are sorry for the inconvenience.

Comment 7

[meiypeke]

(In reply to comment #6)
> Fixed -> see Mail from AVG Support:
> 
> Dear Sir/Madam,
> 
> Thank you for your email.
> 
> Unfortunately, the previous virus database might have detected the
> virus on some legitimate applications. We can confirm that it was a false
> alarm. We have immediately released the new virus update that removes the false
> positive on this application.
> Please update your AVG and check your files again.
> 
> If you need to restore deleted files from AVG Virus Vault you can do it this
> way: open AVG Virus Vault (Start -> Programs -> AVG Antivirus -> AVG Virus
> Vault). Locate the file that was removed, right click on it and choose "Restore
> File(s)" option.
> 
> We are sorry for the inconvenience.
> 

how do I restore the file if the AVG vault has been emptied already ?
thanks

Comment 9

[Carsten Book [:Tomcat]]

(In reply to comment #7)
> 
> how do I restore the file if the AVG vault has been emptied already ?
> thanks
> 

I`m not using AVG, so i can`t tell you how to restore this file in AVG, but since the false/positive was in the Firefox.exe Installer, you can download this archive under http://releases.mozilla.org/pub/mozilla.org/firefox/releases/1.5.0.2/win32/en-US/ for 1.5.0.3 as example