help

i found win32:notre attached to kasperky is it a virus or a false reading any help would be appreciated it :o

what do you mean with “attached to kaspersky”? which file was detected?

Can you say what is the infected file name, where was it found (C:\windows\system32\infected-file-name.xxx)?
What avast! version and virus database are you using? (see About dialog of avast!)

oi here is the name hope you can help me.
AVP.7.125_05.17_09.38_964.SRV.FULL.DMP
C:\Documents and Settings\All Users\kaspersky
win32:notre
eu acho que e mentira
nao sei nao

i also found
c:\program files\microsoft works
File name Inchtour.exe
win32:trojan-gen {other}
any help would be appreciated

To know if a file is a false positive, please submit it to VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com. VirusTotal has a file size limit of 10Mb. Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

Maybe you need to disable Hide protected operating system files and enable View hidden files and folders to manage the file(s).

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be careful, you should ‘exclude’ that many files that let your system in danger.

how do i send the file sorry to to bother
thanks for the help.

If the file is on your disk, attach it to an email and send to virus@avast.com
If the file is in the avast Chest, right click it and send for analysis. You need to fill the SMTP settings into the Program settings before trying to send the file from Chest.

inchtour was fixed already afaik (i’m on holiday trip and can’t tell you more than my thought)… the kaspersky MDMP file was generated during a kaspersky engine crash (caused by kaspersky or gdata product) and contains many fingerprints of malware (plain virus signatures)… it is not a false positive…

God bless and thanks for all the help. :slight_smile:
any more help wit the other problem would be appreciated.