PDA

View Full Version : possible false positive? worm.luder.a found by avg anti-spyware in emule folder


riccrd
April 10th, 2007, 07:39 PM
Hi. after i scanned my pc using avgas it generetad this report :

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 7:29:36 AM 4/9/2007

+ Scan result:



C:\Program Files\eMule\LinkCreator.exe -> Worm.Luder.a : Cleaned with backup (quarantined).


::Report end


then i scanned my pc again it found another worm in the system volume information folder:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 9:35:19 AM 4/9/2007

+ Scan result:



C:\System Volume Information\_restore{69D85728-B1C6-4394-A180-06F80A31A7E5}\RP119\A0029619.exe -> Worm.Luder.a : Cleaned with backup (quarantined).


::Report end


could this be same file? and are they false positives?
i did a scan using spybot, ad-aware, and zass and found nothing.
i'd appreciate any suggestions. TNX :)

karl.ewido
April 11th, 2007, 02:56 AM
Do you scan really with the latest signature updates? Check your signature count on the Status screen with the signature count at our website.
If your are using the latest updates, then please send us a copy of this detected LinkCreator.exe:
http://www.ewido.net/en/support/?AID=34

riccrd
April 11th, 2007, 12:03 PM
I have submitted those two files to the link that you have provided. TNX!!!

karl.ewido
April 12th, 2007, 02:08 AM
We checked this file and with the latest signature Updates, it will not be detected, so please download the latest signature updates for the AVG Anti-Spyware.

riccrd
April 12th, 2007, 06:15 AM
just did that. thanks again and bye for now.