Rootkit false positive? (sii164.sys and ti410.sys)

Viruses and worms
1

Hi all.
Got an Avast warning about the files sii164.sys and ti410.sys
(Rootkit Wind32:Evo-gen)

Scanned with other products, nothing found.
No reference on the net about these being a vrius.

Have uploaded to virustotal and got the message that the files are ok.

Is this a false positive?

Thanks,

David

2

post link to VT scan result here

you can report it to avast lab using one of these options
you may add a link to this topic in case they want to reply here

You can upload files and report issues to avast here : http://www.avast.com/contact-form.php (select subject according to Your case)

You can use mail
send to virus@avast.com in a password protected zip file
mail subject: False Positive / undetected sample (select subject according to your case)
zip password: infected

or you can send files from avast chest
how to use the chest. http://www.avast.com/faq.php?article=AVKB21

3

Pondus,

Here’s the link to virustotal:

https://www.virustotal.com/en-gb/file/f2bca017d11dd77e16939908ea0417a7d2766fd63f09422ccb76d33e82fe9f42/analysis/1402919806/

4

that seems to be a false positive First submission 2010-11-09 07:44:56 UTC ( 3 years, 7 months ago )