Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Juan MoleroJuan Molero 

Trojan Horse

Hi. Today my AVG Internet security started detecting and securing a couple of Trojan Horse threats. However ,the same AVG threat detection message keeps coming back, sometimes every couple of seconds. Is the virus really eliminated? How can get rid of if that it is not the case? Thank you

threat: trojan horse Exploit.SWF_c.APS
object name: c\users\Juan K\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00edd5
state: secured
Identified by: Resident Shield
Robyn BishopRobyn Bishop
Yes the same has happened to me today....Trojan horse Exploit.SWF_c.APS

imasdk.googleapis.com/flash/core/3.220

Want to get rid of it please!
AvinashAvinash (Avast) 
Hello Juan & Robyn.
We are sorry to hear about the inconvenience caused. We have escalated your concern to our senior level we will get back to you with a resolution. Thank you.
AvinashAvinash (Avast) 
Hello Juan & Robyn.
We would like to inform you that it is a false positive and this issue will be fixed in the next program update. Thank you. 
Debra HoustonDebra Houston
I am also having the same problem, any idea when the update will be done. These pop ups are a
major pain every couple of seconds.  Thank you
KishoreKishore (Avast) 
Hello Debra.
We are expecting a new update next week to fix this pop up issue.
I appreciate your patience.
Thank you.
Brian DulleaBrian Dullea
Next week? I have never seen a false positive take that long to fix. 
I was expecting it to be fixed any minute now. 
I have 2,000 users getting these popups! 
Next week doesn't cut it.

 
Bizarder BizzyBizarder Bizzy
I cant take this today i had 512gigabytes and now i have 412gigabytes from the trojan cache f*cksake fix this by tommorow please before i lose everything
Bizarder BizzyBizarder Bizzy
If my computer gets wormed AVG i am not going to be happy! >:(
John TurnerJohn Turner
I have something similar but with a couple twists and need to know if it's the same false positive. 

I got a notification of a Trojan, but stupidly did not immediately remove/heal it.  Instead, I looked at which proceses were running on my computer to see if i could detect anything funny there.  When I came back to remove the virus, that AVG window/notification was gone!  I only got one notification, not multiples as others did.  The notification & disappearing wondow prompted me to do a full system scan, the results showing one Trojan detected (same location as Juan (c\users\JR\AppData\Local\Google\Chrome\User Data\Default\Cache\xxxxxxx).  The scan said there were X number of infections and one could not automatically be dealt with.  When looking at the list of infections (there were a couple other minor ones) they all said 'Secured', except the Trojan's status read 'Restored from Virus V.. (cut off, but I assume Vault)' - huh?  When I look at the actual details of the Trojan it said something different:  the status was 'Healed, Moved to Viru.. (cut off)' - the same thing that all the others said when their details were looked at.  So.. Was this an actual virus and was it removed, or was this too a false positive?

It seems pretty darn coincidental that it popped up on the same day as everyone else - I've been using AVG for years.  Again, I did not get multiple notifications and I did not get a 'Secured' status in my scan.

Let me know - thanks!

JR








 
AvinashAvinash (Avast) 
Hello John.
Thank you for contacting. From your description, it is pretty sure it is the same pop up you have received. As informed earlier on this thread, this issue is going to be fixed in the next update. Thank you.
John TurnerJohn Turner
Uh...  "pretty sure"?!  We're talking about a Trojan here - I'd hope for something a bit more reassuring from a company such as AVG.  Can you "escalate my concern to the senior level" and see what they say?

I've since run another scan with AVG and it came back as no threats, BUT.... I then immediately ran Micro Trend's HouseCall and it came back with several infections, including a Trojan!  WOW! Regardless of whether it's a false positive or not, why theheck didn't AVG catch those infections, ESPECIALLY the Trojan?!
Balasubramanian SBalasubramanian S (Avast) 
Hello John,

For your information, all the security program provider companies will differ in their virus definitions database.
So some .exe files that are safe for AVG will be added as a threat by other security providing companies.
For your case, if you are getting a popup from AVG as Trojan detected whenever you open the web browser then as explained earlier, this is the false positive which is confirmed by our developers team and the fix for this bug will be in our next update.
Please feel free to contact us should you need any assistance.
John TurnerJohn Turner
Thanks.  I did know that databases can be different, but in the case of a Trojan (rated as High Priority hazard by Micro Trend) I guess I thought there'd be more consistency given the supposed severity of the threat.  As I said in the beginning thoguh, I've used AVG for years and have been nothing but happy with it (and have never been affected/under attack).  My problem is not exactly what the others were having and not getting a 100% assurance of it being a false positive is what made me particularly nervous.  The MT scan aside, the Trojan seems to have now disappeared and has not re-appeared when launching my broswer (or at any other time).  Ultimately I guess this mystery is more for your purposes/information than mine!
Aravind GnanamurthyAravind Gnanamurthy (Avast)
Hello John,
I understand how something like this can really try your patience.
Not to worry, it will be fixed in the upcoming update. Please contact us back when you get back browser issue, so that we are more happy to assist you better. Thank you for understanding.
Ask a question
Struggling with non-AVG technology? We can fix that, too!