I bought a DVR card that came with an installation CD and when I try to open english pack.exe I get the subject virus alert message. I had the seller e-mail the file thinking may be it was the CD since there were other .exe files that generated the alert. It has not infected my pc. Avast32 can’t clean it because it says the program is in use and access is denied. My questions are:
Is this a false positive problem?
If yes, how do I get around it so I can load the program.
If this is not a false positive trojan and Avast can’t clean it because access is denied, is there anything that can be done outside of deleting the file to fix it? I need the program to run the DVR. I moved the file to Avast Chest see below.
ChestEntry>
00000005
1099182197
English Pack.exe
C:\Documents and Settings\Administrator\My Documents

Win32:Trojan-gen. {VC}
Vir
no
1099160545
475003


I keep looking at all of the subject postings and haven’t found or I don’t understand if the solutions apply. I did send a report to Avast and did a Google search and ended up coming back. Any assistance is appreciated. I will keep on reading the postings and hope I find the answer sometime soon.

Welcome to the forums.

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner www.virusscan.jotti.dhs.org if any other scanners here detect them it is less likely to be a false positive.

Also see (Mini Sticky) False Positives

HTH David

I sent the zip file but jotti is closed.

Strange about jotti being closed, it looks like some sort of rebuild of the website. It used to have connection problems with a heavy load.

Hopefully it is not gone for good.

You could check it against some of the other online scanners.

Online Virus Scanners and other useful Links Security.Ops.tk

I just checked (31 oktober 2004, 06.05 GMT) and Jotti is back up and running.

He did say, he received some parts for a update to his server (or was it a new server?)

I disabled Avast and used A2 and the trojan remover on Geek and they did not detect it. A2- I opened the file, the text was in symbols. Trojan remover opened it for a second and disappeared. The file must be corrupt. I will have to bug the seller again and see if there is such a thing as a clean .exe file. When I sent my zip file, will some check it out and let me know if they find out anything?