4 replies to this topic

[walk123]

Hi,

I’m using XP-SP3 with Ad-Aware free 9.0.2 (updated today) and it just found the malware Trojan.Win32.Generic.pak!cobra in
c:\programme\acd systems\acdsee\acdsee.exe
c:\dokumente und einstellungen\jens\anwendungsdaten\microsoft\installer\{24561814-4815-4387-ac59-05ddec5af013}\arpproducticon.exe
c:\system volume information\_restore{45eae84d-b427-416b-9f95-b489f266fdad}\rp240\a0135071.exe
c:\system volume information\_restore{45eae84d-b427-416b-9f95-b489f266fdad}\rp247\a0135566.exe

Other anti-malware software like Avira Antivir Personal free, Antivir DE Cleaner and Malwarebytes’ Anti-Malware (all with latest releases and updated today) didn’t’ find any suspicious items.

After de-installing completely the ACDSee software and installing it again the virus came up again. Now all detected files are in quarantine folder.

Please advise if the detected malware is really there or if it is a False Positive.

Enclosed you can find the log files and the zipped quarantine files. Please tell me if you need anything else.

Thanks a lot for your assistance.

Attached Files

•  20110327.txt   36.69K   2 downloads
•  20110327_1.txt   35.51K   2 downloads
•  adaware_quarantine.zip   9.89MB   1 downloads

[LS Andy]

Hi walk123,

Thanks for your post. These files will be re-investigated. We'll post the results here.

Regards,

Andy
Lavasoft Malware Labs

[psvd]

Hey Lavasoft,

i have the exact same report as the topic starter.
XP pro SP3, ACDSee 4.0

i hope its a False Positive.

Regards, Peter

Attached Files

•  acdsee_false_positive.txt   36.31K   3 downloads

Edited by psvd, 28 March 2011 - 02:13 PM.

[LS Andy]

Hi,

I’m using XP-SP3 with Ad-Aware free 9.0.2 (updated today) and it just found the malware Trojan.Win32.Generic.pak!cobra in
c:\programme\acd systems\acdsee\acdsee.exe
c:\dokumente und einstellungen\jens\anwendungsdaten\microsoft\installer\{24561814-4815-4387-ac59-05ddec5af013}\arpproducticon.exe
c:\system volume information\_restore{45eae84d-b427-416b-9f95-b489f266fdad}\rp240\a0135071.exe
c:\system volume information\_restore{45eae84d-b427-416b-9f95-b489f266fdad}\rp247\a0135566.exe

Other anti-malware software like Avira Antivir Personal free, Antivir DE Cleaner and Malwarebytes’ Anti-Malware (all with latest releases and updated today) didn’t’ find any suspicious items.

After de-installing completely the ACDSee software and installing it again the virus came up again. Now all detected files are in quarantine folder.

Please advise if the detected malware is really there or if it is a False Positive.

Enclosed you can find the log files and the zipped quarantine files. Please tell me if you need anything else.

Thanks a lot for your assistance.

Hi walk123,

These FPs have been removed from detection - thanks for the report.

Regards,

Andy
Lavasoft Malware Labs

[walk123]

Hi Andy,

I'm really very glad to hear that these are False Positives!

Have so many thanks for your help

Regards
walk123