Viruses or false/positives?

[system]

I still haven’t got a response to the ‘possible viruses’ I sent up to Avast about 2 weeks ago

I have found out that these type of viruses “Win32:Malware-gen” are the second class type and not the destructive ones…however I would also like to know if these are false/positives.

A0042777.dll (C:\System Volume Information_restore)
A0042778.dll (C:\System Volume Information_restore)
RTCOMDLL.dll (C:\WINDOWS\system\RTCOM)
RTCOMDLL.dll (C:\Program Files\Realtek\InstallShield)

Thanks

[DavidR]

Try a search of the forums for rtcomdll.dll as I believe this has cropped up recently.

EDIT: This is the one http://forum.avast.com/index.php?topic=90514.0.

[system]

@DavidR post:2

Try a search of the forums for rtcomdll.dll as I believe this has cropped up recently.

EDIT: This is the one http://forum.avast.com/index.php?topic=90514.0.

Thanks David for that.

[DavidR]

You’re welcome.

It is always good to check out the forums as it is very hard to be first to experience stuff like this.

I take it that you sent these to the chest, if so then scan them within the Virus Chest and if found to be clean use the Restore option. No point in worrying about the ones in the system restore points, as you can’t put them back in there, just delete from the virus chest.

[system]

@DavidR post:4

You’re welcome.

It is always good to check out the forums as it is very hard to be first to experience stuff like this.

I take it that you sent these to the chest, if so then scan them within the Virus Chest and if found to be clean use the Restore option. No point in worrying about the ones in the system restore points, as you can’t put them back in there, just delete from the virus chest.

Thanks. I didn’t know about being able to scan in the virus chest. It came up no virus.
Have deleted the ones that came from restore.

Thanks again.

[DavidR]

That is an indication that the original detection was an FP and why it is important not to delete, but send to the chest and periodically scan the contents.

If after a few weeks the file is still detected and you have had no adverse reaction to it being in the chest, then you can manually delete from the chest.

If as in your case it is no longer detected, then right click on the file and select Restore, confirm that the file has been sent to the original location and then delete the copy that remains in the chest (safety measure until you know the original is back in place).

[system]

@DavidR post:6

That is an indication that the original detection was an FP and why it is important not to delete, but send to the chest and periodically scan the contents.

If after a few weeks the file is still detected and you have had no adverse reaction to it being in the chest, then you can manually delete from the chest.

If as in your case it is no longer detected, then right click on the file and select Restore, confirm that the file has been sent to the original location and then delete the copy that remains in the chest (safety measure until you know the original is back in place).

Thanks Davod for your help. I am a bit of thicko when it comes to this kind of computer tech.
I did as you said and checked the files were back in their original location. I will keep an eye out for these things again in future scans and will do as you suggested.

I don’t think these files caused any adverse effects while they were in the virus chest. But then, I haven’t tried to access all the programs available on my laptop.

[DavidR]

No problem, glad I could help.