acs.exe file identified with virus

[datadude]

This needs immediate resolution.

Starting on Jan 11, 2010, Avast has indicated that the "acs.exe" file is infected with the win32:malware-gen virus and is preventing this file from executing.  The acs.exe file is a necessary for IBM Thinkpads models T42P wireless communications software.  If this file does not execute when booting up, then wireless connectivity will not work.  I even checked a version of the acs.exe file I had in a backup from a year ago, and Avast identified a virus in that file as well.  I think this is a mistake and needs to get corrected.  I checked VIRUSTOTAL.  Avast and GData are the only Antivirus software that indicated a virus in the acs.exe file.  GData uses the Avast engine.

http://www.virustotal.com/analisis/5edd63ff8c7066fe56837b708cc9b1294af0e156e7510ec13a0f5d87c9d54fe1-1263227938

[polonus]

Hi datadude,

Yes this is a possible FP, and it has been flagged by various av vendors and anti-spyware programs in the past as a FP.
Exclude from avast
http://support.avast.com/index.php?_m=knowledgebase&_a=view&parentcategoryid=20,

Update the file there as a possible FP and wait until a next scan does not flag it anymore...

polonus

[Head in hands]

Hi Polonus / Datadude,

I am having the same problem as mentioned by datadude, Avast picked up the following error on my machine

"C:\WINDOWS\system32\acs.exe cotains Win32:Malware-gen"  and asked what actions I would like to take so I moved it to chest, but now am unable to use my IBM laptop wirlessly.

If the file is to be excluded from Avast please could someone explain me to how I go about doing that and resetting the system back to normal as I am only able to use my laptop via LAN setup at the moment.

I have been searching across the web for answers but have found nothing on this exact topic until now, any help would be very much appreciated as my user name suggests it has got me rather frustrated.

Thanks in advance

[Pondus]

Restoring a false positive file from the Virus Chest
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=376

exlude file
http://forum.avast.com/index.php?topic=37009.0


on-access protection - file exclusion
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=201

[Head in hands]

Thanks Pondus for links!


I have done as instructed and still having issues powering on my wireless radio to try to connect to my wireless network, even when I click on repair as instructed via IBM wireless networking controller interface nothing happens. I can connect via LAN still and all works ok but for some reason unable to use wireless. How can this be if I have restored the file put into chest by avast. Although saying that in my avast chest I have the following files some are there as I have tried to do two system restores to previous dates to try to resolve.

Name              Original Location
A0014852.exe  C:\System Volume Information\_restore{DAAD8284-5896-4B40-A753-8454BDC2E5A5}RP70  Last Changed 17/07/2004 05:24:24 Transfer Time 11/01/2010 12:14:47 Virus Win32:Malware-gen
A0014967.exe C:\System Volume Information\_restore{DAAD8284-5896-4B40-A753-8454BDC2E5A5}RP72 Last Changed 17/07/2004 05:24:24 Transfer Time 11/01/2010 12:16:27 Virus Win32:Malware-gen
acs.exe C:\WINDOWS\system32 Last Changed 17/07/2004 04:24:24 Transfer Time 11/01/2010 10:08:36  Virus Win32:Malware-gen
acs.exe C:\WINDOWS\system32 Last Changed 17/07/2004 05:24:24 Transfer Time 11/01/2010 12:36:47  Virus Win32:Malware-gen
acs.exe C:\WINDOWS\system32 Last Changed 17/07/2004 09:20:25 Transfer Time 11/01/2010 11:46:52  Virus Win32:Malware-gen

I dont want to go off the topic but is there anybody out there who could advise me how to fix or another forum that could help.

Sorry if posted in incorrectly, thanks again for your help

[Pondus]

There will be copy`s of the restored files in the chest

Have you tried downloading and installing the IBM wireless driver again

[datadude]

Hi to Head in Hands.

I added the asc.exe to the Exclusion and moved the asc.exe out of quarantine back to the original Windows/System32 folder. I then rebooted my Thinkpad.  My wireless is working again.  I did not have to a repair of the network connection or reload the IBM wireless drivers. 

[Head in hands]

Hi Pondus / Datadude,

I finally have it working, rushing around after finding out how to exclude asc.exe file, I had gone to a 3rd party IBM site to download a driver that was not compatable with the machine! Silly me! I was then checking options on laptop and found ThinkPad Software Installer and used this to replace the driver I had put in place by mistake and all now seems well.

My only remaining problem would be if what if something like that happens again? Should I not be so hasty to act on Avasts actions? Hopefully now that I have followed instructions this wont happen but you never now!?

Thanks all for your quick responses, yesterday thought I was looking at something really really bad and something that may hit me in the poket hard!

Also datadude sorry for hijacking your thread, is good to know that other people experience smilar problems but there are people out there who have the answers to fix.

Thanks again