Author Topic: A possible False Positive?  (Read 3310 times)

0 Members and 1 Guest are viewing this topic.

Desiree859

  • Guest
A possible False Positive?
« on: May 07, 2014, 03:00:14 AM »
Hello!

I did a scan tonight and Avast said I had an infected file. The strange thing is it wouldn't let me repair it, remove, or do anything to the file. It's just... there. On the scan it says "Error Access is Denied" (5)

I've attached a screenshot for further information. It says it's from Skype but when I looked for that file it wasn't found to be on my computer. I am rather confused as to what this is. Is it a false positive?

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: A possible False Positive?
« Reply #1 on: May 07, 2014, 04:03:44 AM »
hello

Submit the file to Virus Total analysis

https://www.virustotal.com

post the result on the next response.

Desiree859

  • Guest
Re: A possible False Positive?
« Reply #2 on: May 07, 2014, 04:13:13 AM »
Avast won't let me move the file to the chest or do anything with it so I can't do it that way. Also, I can't find the file on my computer. I searched for it but it says it doesn't exist.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: A possible False Positive?
« Reply #3 on: May 07, 2014, 04:19:29 AM »
Avast won't let me move the file to the chest or do anything with it so I can't do it that way. Also, I can't find the file on my computer. I searched for it but it says it doesn't exist.

probably has been deleted or is in a hidden folder

click the Start button, clicking Control Panel, clicking Appearance and Personalization, and then Folder Options.
2.Click the View tab.
3.On the Advanced settings, click Show Files, folders and hidden units and OK.

Desiree859

  • Guest
Re: A possible False Positive?
« Reply #4 on: May 07, 2014, 04:28:34 AM »
I did that but it avast still won't let me put it in the chest or do anything with it and I still can't locate it.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: A possible False Positive?
« Reply #5 on: May 07, 2014, 05:00:16 AM »
I did that but it avast still won't let me put it in the chest or do anything with it and I still can't locate it.

avast interface -> scan-> Boot-time scan
Schedule a scan to restart
Mark the Move to Quarantine
The attached the logs

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: A possible False Positive?
« Reply #6 on: May 07, 2014, 07:58:53 AM »
since the file belongs to skype ..... close it down, and clear skype cashe then do a new scan

http://community.skype.com/t5/Windows-desktop-client/Skype-Problems-Troubleshooting/td-p/52260


Desiree859

  • Guest
Re: A possible False Positive?
« Reply #7 on: May 07, 2014, 01:21:47 PM »
I did a boot scan but Avast now says there are no files infected. It says it was clean.

And Pondus I uninstalled Skype from my computer quite awhile ago.

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: A possible False Positive?
« Reply #8 on: May 07, 2014, 01:37:38 PM »
Just because you think you uninstalled it doesn't mean you did. There are commonly leftovers. \Since boot-time scan didn't find anything. |You are most likely clean and that is a FP.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: A possible False Positive?
« Reply #9 on: May 07, 2014, 02:14:11 PM »
I did a boot scan but Avast now says there are no files infected. It says it was clean.

And Pondus I uninstalled Skype from my computer quite awhile ago.

Reinstall the program following the instructions
the link  said pondus and see if the problem returns.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37526
  • Not a avast user
Re: A possible False Positive?
« Reply #10 on: May 07, 2014, 02:52:55 PM »
I did a boot scan but Avast now says there are no files infected. It says it was clean.

And Pondus I uninstalled Skype from my computer quite awhile ago.
if you dont use skype any more, you may run CCleaner / reg cleaning to clear any leftovers 
if you dont want the toolbar ...use slim installer found at bottom of website here   http://www.piriform.com/ccleaner/builds