ACDSeeQV.exe is W32:Malware-gen ?????

Viruses and worms
1

Avast 4.8 Home discovered file ACDSeeQV.exe as W32:Malware-gen. This file now is in container.
This file is part of the ACDSee9 photo manager suite which has been running on this notebook for more then 2 years without problems.
So I believe that the action of Avast 4.8 is a false positive.
But I do not know how to go on, just put the file back to its original place ???
Anyone can tell me what to do ?
thanks
Hans

2

Prevx - File info - ACDSEEQV.EXE
http://www.prevx.com/filenames/394463503277241792-X1/ACDSEEQV.EXE.html

Avira Forum
http://forum.avira.com/wbb/index.php?page=Thread&threadID=107951

3

Hello,
send us (virus@avast.com) the file to analyze to fix possible faslse positive, put False positive to email body.

How to extract the file from chest:
Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder without avast alerting.

Milos

4

@Milos what happend to my link Nr.2… ???

5

You didn’t wrap it in the url tag so when it comes to a non standard character like a space it breaks the link there.

Example:

[url]http://forum.unnamed product.com/wbb/index.php?page=Thread&threadID=107951

Though I suspect that the url is incorrect anyway as no matter what combination I used it failed to resolove.

6

The name above the url is also changed… ???

Trying again

unnamed product Support Forum http://forum.unnamed product.com/wbb/index.php?page=Thread&threadID=107951

nope…it looks as the name A V I R A is banned… ;D

7

It is the forum filter software…it replaces certain words with ‘Unnamed product’

Oddly though, it only works for some things…It changes the other ‘A’ antiviruses into this, but not the other commercial ones ???

I think it is a thread for another AV…try replacing unnamed product with the name of the AV (I can’t post it other wise it will be changed…hint: third letter is i)