Two items of Malware found following re-subscription to Avast

Avast Free Antivirus / Premium Security
1

Could be a total coincidence but the same night I re-subscribed to Avast, I set a virus scan to complete and went to sleep, when I woke up, Avast had found two possible Malware items

Win32:Malware-gen - libGLESv2.dll - D:Battlenet\Heroes of the Storm\Support\BlizzardBrowser
Win32:Dropper-gen [Drp] libGLESv2.dll - D\Steam\steamappls\common\Trove

Both found during the same scan, they’ve both been quarantined now but I read online one virus is able to open a backdoor for others & one is able to replicate itself. Also read that they’re both undefined and haven’t been seen before/enough to be categorised or named, so does this mean they could just be false positives? It’s the same file in both games, I haven’t used any Blizzard programs in ages and I haven’t even played Trove since I installed it. Not sure if they’ve had any updates to introduce files which would be detected as false positives either.

Also worth noting, I have Avast Premium and have always had it - was simply renewing my subscription, so there wasn’t a period I was without it. I also run Malwarebytes and that detected nothing on it’s scan.

2

Test the file at VT (https://www.virustotal.com) and post the link to the result here.

3

Do I bring it out of Quarantine then? or is there a way to do so without taking it out

4

Yes. If you don’t want to take the risk, you can send it from chest to threat lab for analysis.

5

This is what it’s showing.

https://prnt.sc/u41gy4

6

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php

7

So would you suggest it’s a false positive? Where do you think they’ve come from, because they didn’t show up on the virus scan a few days prior? I haven’t opened battle.net in a while so don’t think it would have updated & as I say, I haven’t played Trove ever, and it’s been installed for a long time.

8

Yes, most certainly.

9

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

10

See Reply #5. :wink: