Is this a False Positive or an actual virus?

Viruses and worms
1

So I have Avast and Norton Security Suite (N360) on my computer. Every once and awhile, if I leave my computer idle, avast will pop up saying "Suspicious Activity Found

Target: Some temporary file, I never had the time to get the whole target.
Virus: win32-enistery SUSP
Process: Leads to N360.exe (Goes through program files)

If you need me to, I’ll give the exact location of the Target and Process.

If this is an actual virus, I’d like to know a free source to get rid of it. (Norton Scans and Avast Scans found nothing).
Avast always says that it “Repairs” the activity, but I don’t know if it’s just a false positive or if the virus is multiplying.

2

Two Antivirus programs will give you errors like this so i can recommend to remove
one of them.

Only one can stay, the choice is yours. :slight_smile:

3

Sadly, when I remove Norton it just gives me an error because this isn’t really MY laptop.
I’m borrowing it. But thanks in advance.
I have the recovery discs, and I’m thinking of just uninstalling norton if I reinstall windows.
(Technically, the laptop is mine, but I don’t have the current Norton password and the guy I got it from doesn’t remember it either.)

So do you think It’s a false positive?

4

Should be one as its leading to a Norton File.

I would go with Avast for now, it has better protection and its free. Norton isnt that great at the moment,
but the next version is better, i tested it already.

5

What does process mean, exactly?
Does it mean what tried to access the file? Or what created the file?

I might reinstall windows this week sometime. Who knows.

6

Process means the file that was accessing the file listed under object. :slight_smile:

7

So then how do you know if it’s a false positive?
If Norton is the one accessing it, who’s to say that it isn’t made by something malicious?

Also,
I’ve had one instance where I had 4 different .tmp files infected.

8

Can you post a screenshot or the file path if possible?

You can also upload the files to virustotal.com (Max. 64 MB) and check with 50+ scanners.

9

Is there a way I can view past logs from the “Suspicious Activity Found” log?
It’s really random when it happens.

10

You can find the log files here: C:\ProgramData\AVAST Software\Avast\report

11

This is from yesterday:
7/19/2014 9:18:17 PM C:\PROGRAMDATA\NORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\cmnclnt\00024960.tmp [L] Win32:Enistery [Susp] (0)
File was successfully repaired…
7/19/2014 9:18:36 PM C:\PROGRAMDATA\NORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\cmnclnt\00030930.tmp [L] Win32:Enistery [Susp] (0)
File was successfully repaired…
7/19/2014 9:18:36 PM C:\PROGRAMDATA\NORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\cmnclnt\00015746.tmp [L] Win32:Enistery [Susp] (0)
File was successfully repaired…
7/19/2014 9:18:36 PM C:\PROGRAMDATA\NORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\cmnclnt\00019948.tmp [L] Win32:Enistery [Susp] (0)
File was successfully repaired…
7/19/2014 9:18:56 PM C:\Program Files\Toshiba\toshiba service station\00025709.tmp [L] Win32:Enistery [Susp] (0)
File was successfully repaired…

12

Yes, these are false positives, theyre also marked as suspicious, so you can ignore them.

Or sent the files in an password protected archive to virus@avast.com subject: false positives

13

Oh! Thank you!
I just wanted to make sure, it’s been bugging me for awhile now!

Thank you so much!
Have an amazing day/night wherever you are!!! ;D

14

Its 9:30 pm, and im in germany, we will get some nice thunderstorms tomorrow. :frowning:

15

Awh. Stay safe if it gets that bad.
Thanks for replying so fast, I didn’t think I’d get a reply that fast haha.

16

this is a classic program conflict

When Software Collides! What to do with your old antivirus program.
https://blog.avast.com/2014/05/09/when-software-collides-what-to-do-with-your-old-antivirus-program/

Why Using Multiple Antivirus Programs is a Bad Idea
http://blog.kaspersky.com/multiple-antivirus-programs-bad-idea/