system
1
I just booted my avast! program and received a virus warning that Win32:SpyBot-A1414 [Trj] was found in c:\windows\system32\studio.exe. I believe that is my Microsoft Windows Media Player 10 file. Is this a false positive? If so, what do I need to do?
DavidR
2
You could check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive.
If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).
Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.
system
3
Please, rename this file to:
studiobkp.exe
If your Windows Media Player Normal’s Run, its a positive Viruse.
If your Windows Media not run, its a false positive, and rename to studio.exe
And, David, yor using Spyware Guard?This program not receive more updates . The last update is 01/2004.Please, unistall.
GoodBye!
Octávio From Brazil
RejZoR
4
And why should studio.exe be a Windows Media Player component?
I don’t see any connection between these two.
It’s certanly not a false positive.
Judging by the name it shouldn’t be in System32 folder,so you’re free to clean it.
DavidR
5
As far as I’m aware it is associated with WinAmp, assuming it is not an alias of a trojan.