false positive of file ATI3DUAG.DLL, a driver for ATI display cards

Starting sometime last week (my Avast Home Edition 4.8 updates daily), when I boot up my computer Avast warns me that the file “C:\Windows\system32\ati3duag.dll” is malware of type Win32:Trojan/gen. I think this is a false positive because that file has been in my laptop since new and Avast never complained before until last week. The file is one of the drivers for my Asus F3JA laptop’s ATI Mobility Radeon X1600 display card. And I’ve had my laptop and Avast installed on it for years now.

After Avast quarantined the file I couldn’t get it to move back to its original location, so I deleted it from the virus chest but then my laptop completely blacked out on restart (of course, because there’s no more display driver!). I had to re-install everything using my laptop’s recovery CD. Then after a fresh installation I get the same warning from Avast about ati3duag.dll being malware again. So this confirms my belief that the warning is a false positive. There is the possibility that the file is already infected with malware when it came out from the manufacturer but this is pretty slim.

Can someone at Avast rectify this? Otherwise it’s pretty annoying that this warning pops up everytime I turn on my laptop.

Hello paulwswu

you can send password-zipped file to virus@avast.com with the subject as false positive avast 4.8.1356 and in the body of the mail give the link to this topic and also the password for the zipped file.

the gen detections can be fps. this fps are from few days due to the change in detection method of trojans. sorry for the problems caused.

you can also upload the file to virustotal.com and give us the link here so that we can take a look at it and confirm it is a fp.

post back.

nmb

No more warning within a day or two after I made my post, so I guess the detection problem has been fixed. Therefore I won’t need to send in the file. Thanks for the prompt response. 8)

Great that it is fixed. come back often.

nmb