Two "desktop.ini" files that Avast flags as malware

system · 2017-07-10T02:12:38.000Z

I just ran a scan and got two infection alerts, both being “Other:Malware-gen[Trj]”. Other is reportedly in “C:\Users\TEMP\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini” and another in “C:\Users*my PC’s username*\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini”. I did quick search and desktop.ini is a Windows file according to some people and a virus according to others. The app that the files belong to appear to be some sort of Windows disk burning application.

I nonetheless when I got the Avast scan report I picked the option to remove the files and didn’t get any further virus alerts after rescanning the folders files were in. While I haven’t noticed anything suspicious on my PC recently and I’m still wondering if this could be simple false positive, I decided to run Farbar scan.

EDIT: I checked Google results for this topic for last 24 hours came across an article from just over hour ago on the japanese Yahoo Q&A site which apparently adresses the same issue, though it seems to talk something about Google Chrome as well. However I cannot read japanese so I don’t get much out of it :-\

https://detail.chiebukuro.yahoo.co.jp/qa/question_detail/q14176474569

I’m off to bed now, hopefully someone has managed to help me out a bit when I wake up

Patrick2 · 2017-07-10T02:31:02.000Z

Have Same Detection today, did a virustotal scan and showed only AVG and Avast detecting them as possible false positive, not sure exactly, doing Malwarebytes scan now, but so far no detections in there at all, but still going. Just switched back to Avast this morning from Windows Defender built into Windows 10, but should be not infected as I practice safe surfing and all that

system · 2017-07-10T02:36:04.000Z

I did MBAM scan earlier today and came up clean.

HonzaZ · 2017-07-10T08:00:15.000Z

Seems like this was indeed a false positive and should be already resolved
https://forum.avast.com/index.php?topic=205277.msg1407486#msg1407486

system · 2017-07-10T08:53:56.000Z

Nice that it was sorted out. I did get a ping about this yesterday as well, but I didn’t think it was that big of an issue. After today’s scan, everything seems to have cleared up.

system · 2017-07-10T12:13:55.000Z

I still went and deleted the files after detection though, but since they were application files would Windows regenerate them if necessary?

HonzaZ · 2017-07-10T12:20:18.000Z

Definitely

Announcements