Possible FP in Intel graphics driver

Viruses and worms
1

I would like some advice on this, please.
I imagine it most likely is a false positive, but am not totally sure about it and it may be the file I need to fix some display problems.

Thanks.

File was first detected during download; Oct 27 2009

Came from:
http://www.acer.com.au/acer/service.do;jsessionid=F6AD4E4612A2EB75B7CA0606FA07048E.public_a_14b?LanguageISOCtxParam=en&miu10einu24.current.attN2B2F2EEF=3112&sp=page15e&ctx2.c2att1=92&miu10ekcond13.attN2B2F2EEF=3112&CountryISOCtxParam=AU&ctx1.att21k=1&CRC=3559666452

It was the Intel video driver: VGA_Intel_6.13.01.3485_2KXP.zip
Select Desktop > Veriton > 5600G to find it.
(An audio driver from the same source downloaded ok.)

Managed to complete download and scanned file again. Avast still shows it as infected - with “Win32:Malware-gen” - MBAM and SAS don’t find any problem.

Jotti scan results: http://virusscan.jotti.org/en/scanresult/0cfb3606e7f7f0d6740478dbe2210135b68b6cbf

Virus Total results: http://www.virustotal.com/analisis/f4017cf330ed122d8ae50deee033c91744a01192a69b88410ba220c53d4540c5-1256639945

2

Send the file to virus@avast.com in a password-protected zip folder with “False Positive” in subject and the password mentioned in the email body.

3

Done, thanks.
Also included a link to this thread, just in case.

Are you suggesting it is likely a fp; should I await further advice?

4

Since there is a low detection rate on VT and almost all of those are generic/heuristic detections there is a chance that it could be an FP.

If you have sent it as a possible FP then that is fine.

If you sent it to the chest, I would suggest sending it to avast from the chest as that will be uploaded directly. Open the chest, Infected Files section, right click on the file and select the email to Alwil software and complete the form. Periodically scan the file within the chest, when it is no longer detected Restore it (right click option in the chest).

5

OK. Thank you.

I emailed the file as suggested by Jtaylor83.

It’s still sitting on my desktop, as it happens; I wasn’t sufficiently concerned to quarantine it, but didn’t want to unzip it till I was sure.

Avast scans it clean today. ;D 8)

So, thanks to all.
Help much appreciated.

6

You’re welcome.

Looks like it was an FP which they have promptly corrected.