Scan detects virus "mv64xx.sys"

Viruses and worms
1

Hi

Just did a quick scan and a threat was detected.

C:\drivers\Mainboard\Drivers\Raid\Marvell\Driver\i386\mv64xx.sys
C:\drivers\Mainboard\Drivers\Raid\Marvell\Install\6320\i386\mv64xx.sys

Severity=High
Threat:Malware-gen

The date of the file is 01/09/2008 06:03 (as seen in windows explorer, date modified).
So file has not changed recently.

The install directory also has asussetup.exe and i expect this is my graphics driver for my gtx760.
I expect if i send file to chest from "C:\drivers\Mainboard\Drivers\Raid\Marvell\Driver\i386" my graphics card will stop working.

Is this false positive?

Thanks
SteveAv

2

You can report a possible FP here: https://www.avast.com/false-positive-file-form.php

3
I expect if i send file to chest from "C:\drivers\Mainboard\Drivers\Raid\Marvell\Driver\i386\" my graphics card will stop working.
If file is already moved to chest by avast it should have stopped working? .... sending it to avast lab from chest will do nothing, exept sending a copy to avast lab, file will remain in chest
Is this false positive?
Upload and test file(s) at www.virustotal.com if tested before, click rescan for a fresh result Post [b]link[/b] to scan result here, not copy and paste
4

Thanks for help.

I have not sent file to chest.

I scanned file at virustotal

https://www.virustotal.com/en-gb/file/e146de0190a602e01768b7d44441d1d2c78affdd083f79ac576c75140bf876eb/analysis/1446046897/

Detection ratio: 1 / 54
Only avast gives a positive.

Should i mark file as ignore in scan results?

5

yes, seems to be a FP First submission 2009-07-06 11:03:51 UTC ( 6 years, 3 months ago )

CopyrightCopyright (c) Marvell Semiconductor, Inc. Publisher Marvell Semiconductor Product Marvell Odin Original name mv64xx.sys Internal name mv64xx.sys File version 3.1.0.14 built by: WinDDK Description Marvell Odin Windows Driver Signature verification [b]Signed file, verified signature[/b] Signing date 11:58 AM 8/1/2008 Signers [+] Marvell Semiconductor [+] VeriSign Class 3 Code Signing 2004 CA [+] VeriSign Class 3 Public Primary CA Counter signers [+] VeriSign Time Stamping Services Signer - G2 [+] VeriSign Time Stamping Services CA [+] Thawte Timestamping CA
6

Hi,
Yup, this was a false positive and was fixed earlier today ;).