Please could someone ck this for me,

I have used (one of my favorite screensavers) on win98 & now on XP,and until january this year all was ok,bt now when I try it I get a virus warning,

I"ve talked to te owner or author of this screen saver (AFHSPACE)
http://artist4hire.net/scr1.html

and you can see the test done here
http://www.dslreports.com/forum/r22559198-screen-sacer-gas-a-virus

                Would someone PLZ ck this for me, one est "SHOWS CLEAN no virus, AVAST says virus, and syUggestion     apprecuated,iS IT a false positive reading from AVAST?
                           Thanks for the help,  clato

Given the VT results I would send it to avast as a possible FP. http://www.virustotal.com/analisis/90340780adc7af563826e0f215bc0fa9d3febdbce8fca5f73464faf00b441e22-1245238149

The avast Win32:Trojan-gen is generic signature (the -gen at the end of the malware name), so that is trying to catch multiple variants of the same type of malware and is a fine balance between detecting a new variant and detecting something valid as infected.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic and the VT results URL I posted above might help and possible false positive in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already in the Infected Files section) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.

Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

Hi Clato,

As only avast and associated scanners flag it, and it is a heuristic scanning, then there always could be the possibility of it being a false positive. Can you try these scanners:
http://camas.comodo.com/cgi-bin/submit
and this one:
http://anubis.iseclab.org/?action=home
and give the results there as an attached txt file for instance.

Also upload the file to avast for further analysis and for the benefit of all here, many thanks for reporting,

polonus

sent it to avast, [img]NOW TODAY it is CLEAN,repaired installed & runningWORKING GOOD, "cLATO

Thanks for the update.