Hello, I am currently doing a routine boot-time scan on my laptop. I forget the last time I ran one, but it has not been too long ago.
Anyways, this scan has claimed two PRELOAD.exe files in my ASUS C:\eSupport\eDriver.… folder were infected with Win32:Malware-gen, and it is claiming a taxhelp.xml and WinPerFedFormset.msi file have the Win32:GenMalicious-CZZ [Trj] in my TurboTax installation.
I feel like these are false positives, but how do I find out?
I would concur with it being a false positive.
As they are part of the computer manufacturers set up files their behaviour can be interpreted as malicious however, they are not
You can restore them from the chest and they should not get detected in a normal scan
But what about the Turbotax ids? How do I test those?
For anyone else with the Turbotax problem, VirusTotal pardoned the Turbotax files
I ran one of the ASUS files through as well
https://www.virustotal.com/en/file/e4ee6074defac9fd65eaf948c9fce84fa8b84678a764cec735c95fe5ac0ab43c/analysis/1423936292/
End result: Avast! is being stupid
I believe they are also false positives, however, they can be tested at virus total
scrub the rest you beat me to it
I would like to presume the taxhelp files are false positives since Avast decided recently to flag every instance going back 10 years and Avast never noticed them before. I’d like to know why Avast hit them this time around.
You can report a possible FP here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE