Real or False Positive? still running scans to find out for sure

Patrick2 · 2017-07-10T01:33:47.000Z

Hi All

Recently did clean install of Avast, was moving files around from possibly dying external drive, decided to run full scan, and got an alert on possible infection (checking with Malwarebyes in about 3-4 minutes)

Note Previously tried out Windows Defender for a bit after a local friend was like try it, but don’t see how I would get infected, as I did same surfing I did in the past*

Virustotal results

https://www.virustotal.com/en/file/feea416e5e5c8aa81416b81fb25132d1c18b010b02663a253338dbdfb066e122/analysis/1499651193/

Only AVG and Avast Detected it as
Other:Malware-gen [Trj]
(False positive listed as)

mchain · 2017-07-10T02:27:21.000Z

Identical detections with another avast user here: https://forum.avast.com/index.php?topic=205279.0

jeffersonsant · 2017-07-10T02:30:37.000Z

Hello.

I confirm that this is an FP.Scan the origin and showed the same detection.

Attached

system · 2017-07-10T02:31:06.000Z

Oh, hello! Sorry that I didn’t notice this topic, but the topic title didn’t highlight this being same issue as with me :-[

Patrick2 · 2017-07-10T02:32:55.000Z

Yes I should’ve probably titled it differently than I did, my bad

jeffersonsant · 2017-07-10T02:39:41.000Z

I sent mine through the report

https://www.avast.com/false-positive-file-form.php

Reported to Vírus analyst ~

Patrick2 · 2017-07-10T02:47:59.000Z

Same sent in a report also to Avast

LukasJ · 2017-07-10T07:34:41.000Z

Hi, detection was disabled.
Will be solved in next stream update. (5 minutes)

Lukáš

Patrick2 · 2017-07-10T16:30:38.000Z

Thank you Lukas on fixing this in a timely manner

system · 2017-07-13T23:25:23.000Z

Sorry to resurrect an older thread, I’ve only just noticed I had two desktop.ini files move to the vault on the 10th too, and they’re still being flagged as Other:Malware-gen [Trj] in the virus vault. I’ve submitted them to the lab.

jeffersonsant · 2017-07-14T22:48:25.000Z

Avq2315 post:10:

Sorry to resurrect an older thread, I’ve only just noticed I had two desktop.ini files move to the vault on the 10th too, and they’re still being flagged as Other:Malware-gen [Trj] in the virus vault. I’ve submitted them to the lab.

I do not suppose it’s the same local reported, you should get the answer soon.

system · 2017-07-15T09:13:25.000Z

Well, it was in the same location as the person in the other thread (https://forum.avast.com/index.php?topic=205279.0), “C:\Users*my name*\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini” so I assume if it’s an fp for him, it is for me. An MBAM scan found nothing.

jeffersonsant · 2017-07-17T19:50:26.000Z

Avq2315 post:12:

Well, it was in the same location as the person in the other thread (https://forum.avast.com/index.php?topic=205279.0), “C:\Users*my name*\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini” so I assume if it’s an fp for him, it is for me. An MBAM scan found nothing.

What is the version Avast and number of VPS ?

Announcements