Author Topic: possible false pos bf2142  (Read 2775 times)

0 Members and 1 Guest are viewing this topic.

Vorg

  • Guest
possible false pos bf2142
« on: January 21, 2010, 08:50:08 AM »
Avast did one of it's updates today and tonight While I was afk it poped up a box saying it found Spyware in a file in battlefield 2142 folder. The path is cut off in the popup, so no way to read the improtent part, but it's
Electronic Arts\Battlefield 2142 Deluxe Edition\Support\B..... Don't know what is after the "B"
Spyware found: Win32:Spyware-gen[Spy]
VPS version: 100120-1, 01/20/2010

I haven't even run bf2142 in a couple of weeks at least. So this must have been a back ground scan. I didn't know avast did regular drive scans automaticly.

Decided to let it try to move/rename the file. the file it tried to move was Battlefield 2142_uninst.exe but it got access denied. I am runing windows 7 x64 home.
« Last Edit: January 21, 2010, 08:53:58 AM by Vorg »

creni

  • Guest
Re: possible false pos bf2142
« Reply #1 on: January 21, 2010, 10:48:02 AM »
Same thing happened here, the path is :

C:\Program Files (x86)\Electronic Arts\Battlefield 2142\Support\Battlefield 2142_uninst.exe

The spyware is : Win32:Spyware-gen [Spy]

and my VPS version is : 100120-1, 20/01/2010
« Last Edit: January 21, 2010, 10:49:34 AM by creni »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: possible false pos bf2142
« Reply #2 on: January 21, 2010, 10:57:00 AM »
Electronic Arts\Battlefield 2142 Deluxe Edition\Support\B..... Don't know what is after the "B"

Hello,
you can try to select this line by mouse and it will scroll to the end of path.

Try to rescan with curent VPS (100121-0) and if still detected then send us (virus@avast.com) the file to analyze and put the "false positive" to subject.

Thank you,
Milos

Vorg

  • Guest
Re: possible false pos bf2142
« Reply #3 on: January 21, 2010, 07:48:45 PM »
When I logged on I got a new update. I right clicked the file and picked scan. box popped up for about a second and then went away. Got a glimps of the path/file name before the box went away. no message one way or another. Guess it's happy now.