possible false positive? worm.luder.a found by avg anti-spyware in emule folder

Discussion in 'ewido anti-spyware forum' started by riccrd, Apr 10, 2007.

Thread Status:
Not open for further replies.
  1. riccrd

    riccrd Registered Member

    Joined:
    Mar 16, 2007
    Posts:
    5
    Hi. after i scanned my pc using avgas it generetad this report :

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 7:29:36 AM 4/9/2007

    + Scan result:



    C:\Program Files\eMule\LinkCreator.exe -> Worm.Luder.a : Cleaned with backup (quarantined).


    ::Report end


    then i scanned my pc again it found another worm in the system volume information folder:

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 9:35:19 AM 4/9/2007

    + Scan result:



    C:\System Volume Information\_restore{69D85728-B1C6-4394-A180-06F80A31A7E5}\RP119\A0029619.exe -> Worm.Luder.a : Cleaned with backup (quarantined).


    ::Report end


    could this be same file? and are they false positives?
    i did a scan using spybot, ad-aware, and zass and found nothing.
    i'd appreciate any suggestions. TNX :)
     
  2. karl.ewido

    karl.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    236
    Location:
    Germany
    Do you scan really with the latest signature updates? Check your signature count on the Status screen with the signature count at our website.
    If your are using the latest updates, then please send us a copy of this detected LinkCreator.exe:
    http://www.ewido.net/en/support/?AID=34
     
  3. riccrd

    riccrd Registered Member

    Joined:
    Mar 16, 2007
    Posts:
    5
    I have submitted those two files to the link that you have provided. TNX!!!
     
  4. karl.ewido

    karl.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    236
    Location:
    Germany
    We checked this file and with the latest signature Updates, it will not be detected, so please download the latest signature updates for the AVG Anti-Spyware.
     
  5. riccrd

    riccrd Registered Member

    Joined:
    Mar 16, 2007
    Posts:
    5
    just did that. thanks again and bye for now.
     
Thread Status:
Not open for further replies.