Avast flag JAAScoisX-code.exe as Win32-Delf-LBM[Trj]

Viruses and worms
1

Hi malware fighters,

Avast flag JAAScoisX-code.exe as Win32-Delf-LBM[trj] on my box, I think it is a FP.
I had it from here: http://www.jaascois.com/software/X-Code/JAAScoisX-Code.exe

Is this a FP?
DrWeb’s av link checker gives:
checking: http://www.jaascois.com/software/X-Code/JAAScoisX-Code.exe
Engine version: 4.44.0.9170
File size: 620 bytes

http://www.jaascois.com/software/X-Code/JAAScoisX-Code.exe - Ok

Checking: http://www.jaascois.com/?foiffs=in100fweg
File size: 29.45 KB

polonus

2

What does virustotal say ?

3

Hi DavidR,

I could not upload, because it said at virustotal that the archive was empty. Maybe avast has beaten me to it. I have the original on a USB stick and will try it later from another machine and give you the results. I have it for a longer time now, and avast never flagged it, nor SAS, nor MBAM, nor ewido micro, so it is strange to me,

pol

P.S. I have it since 2006: http://forum.avast.com/index.php?topic=22714.0

Damian

4

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

You may need to pause the standard shield to copy it from your usb stick to the suspect folder.