False Positive: google toolbar = rootkit

as of yesterday i got blasted with about 2,000 emails from our client machines reporting the google toolbar as a rootkit.

thanks for that, i’m sure google’s toolbar is not a rootkit…

“C:\Program Files\Google\GoogleToolbarNotifier\swg-5.1.1309.15642\SearchWithGoogleUpdate.exe[Embedded_R#3cf28][Embedded_R#4aa98]” is infected by “Win32:Rootkit-gen [Rtk]” virus"

“C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll[Embedded_R#4aa98]” is infected by “Win32:Rootkit-gen [Rtk]” virus"

if only eset nod32 server wasn’t so complicated… we’d love to switch to them but we’re in too deep with avast already :confused:

we’ll reluctantly be renewing in august.

Hi BryonTRN,

Please see this thread:
http://forum.avast.com/index.php?topic=46837.0

From what has been said, it is a false positive and will be fixed in the next VPS update.

-Scott-

thanks for that link - i did search the forums here but didnt see anything readily about this

No problem, glad to help :slight_smile:

-Scott-