Shows a detection threat on its own uninstaller ???
I always keep an uninstaller onboard here
Also shows threat on long scan as well
I set it to do nothing
see below:
C:\Users\Downloads\aswclear5.exe [L] Win32:Malware-gen (0)
Infected files: 1
Total files: 69688
Total folders: 22157
Total size: 19.7 GB
Scan stopped: Friday, February 04, 2011 5:38:20 AM
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect*
That will stop the File System Shield scanning any file you put in that folder.
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update.
Yes that would leave them in place, but it won’t stop them being detected again is it isn’t an Ignore and allow to Run command.
You have to submit to avast for then to analyse and correct the detection, but I would recommend following the complete process, VirusTotal, etc. as it gives them more evidence if only avast and gdata detect it.
Thanks Avast team for taking care of this so quickly
Since removing the file I have on only one of the three computers that showed the threats run a Memory scan and a IE scan of the folder that had originally stored AWSClear5.exe file. Both scans turned up clean.
I updated my virus definitions. Everything has been fixed except for
D:\hp\Drv\APP22713\scr\KbdStub.exe
The above file is located in the D drive of my Factory Image on my HP computer. When I click on it, there is a Recovery subfolder. On the right hand side, it says
Recovery Partition
Warning!
This area of your hard drive
(or partition) contains files used
for your PC Recovery.
Do not delete or alter these files.
Any change to this partition could
prevent any recovery later.
You should be able to manually add this one to the chest, C:\hp\KBD\KbdStub.exe
Open the chest and right click in the Chest and select Add (see image), from the next window navigate to where you have the sample (C:\hp\KBD\KbdStub.exe) and add it to the chest. Once in the chest, right click on the file and select ‘Submit to virus lab…’ complete the form and submit as a possible False Positive, the file will be uploaded during the next update.
This only sends a copy to the chest, the original remains in place.
So it would now be possible to Extract a copy to the Suspect folder and upload to virustotal as I mentioned in my first reply.
not good to see things like that, or false alerts on HP utilities. not far ago avast rendered computers useless with a bad virus definitions update. makes you think what can happen next. not cool avast.