I think Avast got a wrong virus check at Rundll32.exe on VPS ver 05-15-08

Avast Free Antivirus / Premium Security
1

My computer is normal on VPS ver 05-14-08.
But it show the virus found at Rundll32.exe on VPS ver 05-15-08
Now all of my 3 PCs show the same message Win32: agent-XEE virus.
I think it may be wrong check on the new VPS version.
Please check it again.
Thanks.

2

try to upload the file to Virustotal:
http://www.virustotal.com/

and post the results…

3

What is the location of rundll32.exe on windows XP Pro SP2 it is in the windows\system32 folder

My file is 33,280 bytes in size and version 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) and an MD5 of da285490bbd8a1d0ce6623577d5ba1ff and is clean.

4

I use Windows 2000 profesional. The file Rundll32.exe in the .\system32 folder only.
Here is the Virustotal result link
http://www.virustotal.com/analisis/d9e70c0d6788d4312e0737db40cac21a

5

I got the same problem and same test result from VirusTotal analysis.

I copy the rundll32.exe file onto USB drive and scan with AviraAntivirus on another PC, no virus detected. I copy another rundll32.exe from another Windows2000 PC and tested with Avast!, again, virus (?) detected.

Anyone can help with this? Everytime I need to do some system work, such as clean temporary website files for IE, the virus warning shows and I can not proceed anymore without remove the rundll32.exe. That’s really annoying. >:(

6

I believe it’s a false positive, and as such, it should be fixed soon.
Roughly in a couple of hours.

Thanks
Vlk

7

AFAIK this should now be fixed with VPS 080516-1.

BTW you’re using Chinese version of Win2K?

Thanks
Vlk

8

I’m not sure about donaldduck’s situation. But, indeed, the two Windows2000 PC I go the false-positive warning is Traditional Chinese version.

Thanks for you guy’s work.

9

Glad that this was quickly resolved for you.

Welcome to the forums.

10

It come back to normal now.
Thanks for your work.