Results 1 to 7 of 7

Thread: Virus or False Positives??

  1. #1
    2harts4ever Guest

    Default Virus or False Positives??

    Good evening,

    Tonight I was running a Lavasoft Ad-Aware 2008 scan after just downloading, installing and updating the new ZAISS version released today.

    While Ad-Aware 2008 was scanning ZA found and quarantined two 'viruses'.

    Both were called: Trojan-Downloader.Win32.Agent.vur

    One had a path of: C:\WINDOWS\unins000.exe and the other






























    C:\Program Files\SpywareBlaster\unins000.exe


    Are these two findings for real or just false positives?

    Thanks and regards,

    2harts4ever

    Operating System:Windows XP Home Edition
    Software Version:7.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    grendor Guest

    Default Re: Virus or False Positives??

    Get the new version for ZA and then un Quarintine each file that showed the trojan and rescan 1 at a time I had 3 files all show that error. The were all uninst.exe in 3 dirrerent directories so i downloaded new ZA patch and all is fine after i un-quarintined the files.
    Hope that Answers your questionGrendor

  3. #3
    duras Guest

    Default Re: Virus or False Positives??

    Hi
    My scan ran after the update and found trojan-downloader.win32.agent.vur in 3 places - two system restore folders and an unins000.exe file.
    So
    is it a
    virus or false positive?
    What wll happen if I delete the files?
    Thanks
    ZoneAlarm Security Suite version:7.0.483.000
    TrueVector version:7.0.483.000
    Driver version:7.0.483.000
    Anti-virus engine version:3
    Anti-virus SDK version:5.0.1.85
    Anti-virus signature DAT file version:954907500
    Anti-spyware engine version:5.0.189.0
    Anti-spyware signature DAT file version:01.200807.4235
    AntiSpam version:5.0.6.8903

  4. #4
    jeffdwisc Guest

    Default Re: Virus or False Positives??

    I have the same problem. It showed after the patch. The file is unins000.exe

    It is located in two places, both which have to do with the same program (GIMP). IF this is a false positive, how can we correct it?

    Message Edited by jeffdwisc on 07-11-2008 08:08 AM

  5. #5
    findley Guest

    Default Re: Virus or False Positives??

    Suggest you start by uploading the potentially "false positive" files to http://www.virustotal.com/
    VirusTotal is a free service which analyzes suspicious files against 32 anti-virus engines. You'll get a fast answer as to whether these are all false positives.

    If the files turn out to be false positives please report them:

    Anti-virus false positive:
    Send the file in a password protected zip to newvirus@kaspersky.com. Subject: False Positive
    Be sure to include the password in your e-mail.

    Anti-spyware false positive:
    http://www.zonealarm.com/store/conte...are_report.jsp

    Should these turn out to be false positives, by reporting them you help yourself and other users.

    Findley

  6. #6
    2harts4ever Guest

    Default Re: Virus or False Positives??

    Hi everyone,
    I checked both of mine with Jotti's Malware Scan and both came up clean.
    If you want to check yours go to:
    http://virusscan.jotti.org/
    Thanks and regards,
    2harts4ever

  7. #7
    yehudit Guest

    Default Re: Virus or False Positives??

    Well, I saw this Trojan-Downloader virus in the ZA scan results, and deleted it as ZA advised. Silly me. I've now lost all the email that was in my Thunderbird inbox. I think the virus was probably in some spam message, which I could have deleted manually.

    Is there any way to undelete an infected file once it's deleted? Or have I lost my email forever?

    Yehudit

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •