I just booted my avast! program and received a virus warning that Win32:SpyBot-A1414 [Trj] was found in c:\windows\system32\studio.exe. I believe that is my Microsoft Windows Media Player 10 file. Is this a false positive? If so, what do I need to do?
You could check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive.
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).
Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
Please, rename this file to:
studiobkp.exe
If your Windows Media Player Normal’s Run, its a positive Viruse.
If your Windows Media not run, its a false positive, and rename to studio.exe
And, David, yor using Spyware Guard?This program not receive more updates . The last update is 01/2004.Please, unistall.
GoodBye!
Octávio From Brazil
And why should studio.exe be a Windows Media Player component?
I don’t see any connection between these two.
It’s certanly not a false positive.
Judging by the name it shouldn’t be in System32 folder,so you’re free to clean it.
As far as I’m aware it is associated with WinAmp, assuming it is not an alias of a trojan.