False positive?

I had some computer problems with malware a little while ago which was sorted out on here. AVG anti spyware found Trojan KILLAV in a messenger file and quarantined it which was fine. However I ran another AVG scan last night and it found the trojan again and said it was embedded in an I386 file and did I want to quarantine the whole file which I did to be on the safe side. I then googled the I386 file that it said it was embedded in and it took me to the official ewido site which said that they thought the trojan picked up was a false positive. Does this then mean that I haven't got a trojan? I'm confused!

You're very unlikely to get an answer to your question in this forum since it clearly states it's not for help with computers. You should contact a mod or admin to move this topic to a more appropriate place. I looked for a place to contact them about threads in the wrong forums but couldn't find any.

I certainly didn't mean to offend anyone by posting in the wrong forum EnigmaChick - I'm sure the lovely mods will move it to a more appropriate place if necessary It's not really a problem because it's been quarantined anyway, I was just confused as to what a false positive was, having never heard of it before

Maybe my tone was too harsh , sorry if it was. I was merely trying to help you out by saying you might not get any help to your question in this forum. A mod/admin may happen apom this thread and remove it but because they're very busy people this may not be likely(hope I haven't offended any of the admin/mods was that statement ). So that's why I suggested you pm a mod or admin to move it or if you can and I have certainly haven't, find a place on here that is designed for that sort of thing. However the choice is yourself. By the way it takes a lot to offend me anyone else here I have no idea and hope you didn't either but I doubt it.

Hi Susie Wong,

EnigmaChick is correct that we don't do malware removal in this Other Computer Problems Forum when the fix requires HJT and other advanced tools.

And I see that you know where the Malware Removal Forum is, since you've just completed some hard work there with IndiGenus http://forums.tomcoyote.org/index.php?show…mp;#entry362612

I also see that IndiGenus referred you over here to OCP Forum for follow-up as needed.

Just a note:
No one is likely to be offended by a person posting here at TomCoyote.
Most often, if you do post in the wrong section, you'll get a helpful prompt from a Member, as EnigmaChick offered.
Hope you don't feel like a ping-pong ball here.
__________________

AVG AntiSpyware 7.5 "has" recently demonstrated a "false positive" and then even more recently, corrected the problem with an update.

(False-Positives occur when a automated malware removal utility like AVG AntiSpyware, include a potential threat in their data base, and later discover that the identified item is actually "legitimate".)
It happens from time to time and it has happened with most of the prominent tools.
Fine Companies like Grisoft (owner of AVG) generally correct such situations promptly.

Open you AVG AntiSpyware 7.5. Select "Update" and Press - Start Update.

Next:
Still in AVG AntiSpyware 7.5 - Select "Infections" - highlight the quaranteened i386 Folder - Select Restore
(Note: do not Restore other items in quaranteen, if any, —- just the i386 folder)

Now Run your AVG AntiSpyware 7.5 (you've recently updated it above)
GoTo: - Scanner - Select - "Complete System Scan"
__________

Post your Scan Report back here into this Forum Thread.

If AVG AntiSpyware 7.5 identifies the same item again, then it's time to head on over to the Malware Removal Forum again.
If that is necessary, I'll get in touch with IndiGenus, so he can have a look.

Best Regards

Just realised that now this is a thread that's being dealt with by a authorized person I shouldn't have posted to it once again, please delete this post, sorry.

Threads in OCP Forum (Other Computer Problems) are "open" to replies from any helpful Member of TomCoyote who demonstrates courtesy, willingness to learn, and ability to share knowledge and skill openly. There are a few frequent responders whose replies and solutions have, over time, been informally reviewed by the administration of TomCoyote and found to be safe, reliable, accurate, educational, civil in presentation, and diligent in follow-up to the satisfaction of resolving the Member's situations. As is typical of other "help-forums" such individuals gradually become known for their helpfulness, reliability, and courteous manner. As a result some may have received the valued designation of "staff". Please remember that we are all "volunteers", and that the designation of "staff" in no way represents that "staff" are always or in any way, more knowledgable than other capable Members. "Staff" may be the individuals who reply more frequently, and offer "traffic control" suggestions more often, but the wonderful thing about TomCoyote is that the entire body of the Membership has grown to be more knowledgeable and has adopted values of learning and sharing in a courteous manner. You, the Members, are what makes TomCoyote the wonderful resource that it is. Best Regards, Doug

Threads in OCP Forum (Other Computer Problems) are "open" to replies from any helpful Member of TomCoyote who demonstrates courtesy, willingness to learn, and ability to share knowledge and skill openly.

There are a few frequent responders whose replies and solutions have, over time, been informally reviewed by the administration of TomCoyote and found to be safe, reliable, accurate, educational, civil in presentation, and diligent in follow-up to the satisfaction of resolving the Member's situations.

As is typical of other "help-forums" such individuals gradually become known for their helpfulness, reliability, and courteous manner. As a result some may have received the valued designation of "staff".

Please remember that we are all "volunteers", and that the designation of "staff" in no way represents that "staff" are always or in any way, more knowledgable than other capable Members.

"Staff" may be the individuals who reply more frequently, and offer "traffic control" suggestions more often, but the wonderful thing about TomCoyote is that the entire body of the Membership has grown to be more knowledgeable and has adopted values of learning and sharing in a courteous manner.

You, the Members, are what makes TomCoyote the wonderful resource that it is.

Best Regards,
Doug

Well I'm not training in the Classroom so hopefully you'll eventually see more of me!

Hi EnigmaChick, We all look forward to your contributions to the forums here, Glad to have you aboard! Regards paws