question

Hi im new here and i got a question, i scanned my drive with avast and it found C:\Program Files\WinRAR\Zip.SFX [L] Win32:Trojan-gen. {UPX!} , the weird thing is that it’s in the winrar.exe installation program too (its packed with the application), does anyone know if its really a virus or a false positive?

Yes, it is a false alarm, nothing to worry about. Do not ask me, why they don´t fix it. :slight_smile:

thank you :slight_smile:

I found this “Win32:Trojan-Gen (UPX!)” on my system also.

I deleted the “corupt” file. It was called “i2BA.tmp.”

Have I messed something up? Everything seems to be working OK but then I haven’t been able to test everything, what should I do, anything?

Alan

If you look at the extension of that file, you will see it is a temporary file. A lot of the malware is using temp files to infect a system. I suggest you run a boot scan to see if something else comes up. Better safe than infected. :wink:

I did and it came up clean but what had me concerned was the previous message that said it was a “false positive” so I was afraid I deleted something important.

Nope, nothing to worry about. And if you look at the first post here, you will see that it is about a legitimate winrar file. Also if you look at the date you will see that it is a rather old post.

If a false positive is detected, Alwil fixes this normally with the next vps release.

Thank you!