False positive ?

Avast Free Antivirus / Premium Security
1

It is possible that the home edition avast deetcte the user32.dll as false positive for the virus and eliminate it equiera not do absolutely nothing and leaving after user32.dll eliminates the machine does not start but … if it restores the user32.dll AVAS it returns to see how the virus is possible …?

2

What virus did you get reported?

3

Funny, the user32.dll was falsely detected by AVG few days ago… are you sure you’re using avast! and not AVG ?

4

Besides what the others have said, where is this file located e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (C:\Program Files\Alwil Software\Avast4\ashLogV.exe), Warning section, this contains information on all avast detections.

5

I had the same problem: avast detected user32.dll as a trojan and I… deleted it. Now Windows (XP) doesn’t boot, the blue screen stays still. So I can only use the recovery console to fix my problem, and from here I can’t restore the dll file.
Does anyone know how to disable avast from Windows recovery console? I suspect the problem is similar to the AVG issue, which the company solved through a command to disable the resident shield, as follows:

disable avgMfx86
disable avgMfa86
disable avgldx86
disable avglda86

I need a similar solution applied to avast!

Thank you.

6

A few more information, please:

  1. What build of avast! do you use? (the latest is 4.8.1282)
  2. What version of VPS reported the virus? Today’s?
  3. What is the exact version of Windows you use? (i.e. what service pack, what language version)
  4. Did you set a “Silent mode” in avast? (because by default, it doesn’t delete anything unless you select the Delete action from the virus warning)
7
disable avgMfx86 disable avgMfa86 disable avgldx86
Guess who owns these files ;D
8

yep sure is AVAST home edition version 4.xx I regret not having a snapshot of your screen but is well … … Each time you retrieve the file user32.dll AVAST ANTIVIRUS detects and removes it as a virus or not it lets you do anything in the machine … I saw that AVG had that problem with a database bad … will be the same with AVAST? ’

forgiveness for my English …

9

Can you please answer my questions?

And, most important - can you provide us with the corresponding user32.dll file? (send by e-mail, upload somewhere…)
Thanks.

10

Lets not lose sight of the fact that avast ‘doesn’t’ delete anything, it detects an infection and alerts to it, the user has a number of options Move to chest, Move/Rename, Repair (not available unless a true virus infection), Delete and no action.

So which option did you choose ?

Many people are trying to help you and have asked questions without answers we are guessing.

If this was a bad virus signature update then we would all be screaming the house down and yours is the only case, this is also why so many questions.

11

bigmagcba,

Do you have both AVG & avast! on your computer? ???

12

I’m not seeing this with EITHER Vista sp1 32bit OR XP sp3, And not just my Machines, but several others I help keep updated. So until they provide more info, I think this should be taken with a grain of salt.

13

I have Windows XP Home Edition with the Service Pack 2, i think. Maybe 3…
Avast Home edition updated, but i don’t know which version exactly… I can’t access!
All in spanish

14

Ah! and the false positive was dettected on thursday (13th)
I think that was dettected as a generic trojan… but i’m not sure

15

I do not have the AVG and AVAST … only AVAST and actually gives you options when you find the file … but any option which serves only to choose the pc freezer and lets you make no more nothing,
And will be a big grain of salt … but since has gone on many machines …

That few people report it here does not mean it will not happen what happens is that because it is very rare for me to post here …

and as I said before I regret not having a screenshot because it gives the alert when the machine is frozen completely … I had to deactivate the virus … and the machine back … proved to work flawlessly with the latest update of AVAST

16

Sorry I meant that I had to DISABLE AVAST ANTIVIRUS …

Sorry … and THANK YOU

17

OK! I solved my problem reinstalling windows and uninstalling Avast

thanks!