I’ve had Nox installed for some time now and I know it’s a pretty popular android emulator. Today I had checked my laptop and found the “uninst.exe” file in the “Program Files (x86)/Bignox” folder infected with a Win32:DH-AI malware. I later scanned the file on my PC and it treated it the same way and went to the virus chest.
It never had a problem earlier, and I see no reports of the virus anywhere else so I was thinking it was just caused by a virus definitions update or something, but I just want to be sure if it was a false positive or something.
Whilst it is a good start, there are certain things that aren’t scanned for in an on-demand scan, which is done by the virus total site.
There occasions that uninstall functions might look suspicious, given what they can/programmed to do, run around deleting things files, registry entries, etc.
There have been a few detections of Win32:DH-AI that were FPs, so yes this should be submitted to avast as a possible FP. If this file is in the virus chest, right click on it and select Submit to virus lab…
First submission 2016-11-09 23:12:30 UTC (