False positive detection?

Viruses and worms
1

Hello,
my PC infected by a virus after update virus-definition at 17 OCT 2012 , the following files with a virus;
bckgzm.exe : Location: C:progame files\MSN Gaming zone\windows
infected by : Win32-Spyware-gen[Spy]
rvsezm.exe : Location: C:progame files\MSN Gaming zone\windows
infected by : Win32-Spyware-gen[Spy]

OS: Window XP SP3

i double check with Malwarebytes- Anti-virus and Spybot ,both of them results is “clear” ,and i sent 2 files at virustotal.com ,and only Avast and G-data found out virus , I also send this 2files to Avast Lab , and double check the isolated files with new definition ,1 week passed,it still define as a infected files .

then ,I formated and reinstall Window ,and do a virus scan immediatly , i still got virus with this 2 files ,Hmm,i decided check the files in the Window XP INSTALL CD with AVAST, the results is "clear"at a full CD Check,but i check the following files with Avast by the method with “selected files”

\I386\bckgzm.ex_ infected by : Win32-Spyware-gen[Spy]
\I386\rvsezm.ex_ infected by : Win32-Spyware-gen[Spy]

and then check at Virustotal.com as the above files:
it’s only Avast and G-data showed that 2 files inflected by Win32-Spyware-gen[Spy]

and i read a post in AVAST forum and found out a False Positive dection problems with this 2 files,and finally it report as a False Positive detection.
Is it a FALSE POSITIVE detection again? i 'm waiting for a new- virus definition for a week ,and repeat the virus scan ,the files still infected ,it make me confuse ,False Positive or not ~

plz help ~

2

can you post the virustotal scan link so we can see?

have you uploaded the file(s) to avast lab as false positive?

3

the virustotal scan link

  1. file name: bckgzm.exe
    https://www.virustotal.com/file/38e5685e6aa795088ea7fda485206f7d34f20b11af714844dfaa7b59690e7d3f/analysis/1351015950/

  2. file name :rvsezm.exe
    https://www.virustotal.com/file/57c8427129da85210344373bc40d41916df8b377f3cbae64c8d132608a452b0f/analysis/1351015945/

and i uploaded the files to avast lab as a false positive at the 1st time detected by avast.

thanks for your reply.

4

Most likely false positives as GData uses avast as one of its two scanners, so this is effectively only avast detecting it.

5

hello. :slight_smile:
A new virus definition update at 121024-0 , 2 files have a “clear” result , my problem solved, thanks AVAST team and all replies in AVAST Forum.

thanks for help ~ :smiley:

6

You’re welcome, thanks for taking the time to report and send to avast so they can be corrected.