Avast WEBforum

Other => Viruses and worms => Topic started by: REDACTED on March 01, 2016, 03:42:19 AM

Title: windows file infected
Post by: REDACTED on March 01, 2016, 03:42:19 AM

when i run boot-time scan avast detected rg3.dll & rg4.dll is infected by Win32:Malware-gen. i choose 1.Fix automatically but it prompted me a message "the file is in windows folder, are you sure?" well, i am novice at such a thing so that message creeping me out. is those two .dll file really infected or it just false alarm?

Title: Re: windows file infected
Post by: Pondus on March 01, 2016, 07:26:08 AM

Upload and test file(s) here  www.virustotal.com   if tested before, click rescan for a fresh result
Post link to scan results here

Title: Re: windows file infected
Post by: REDACTED on March 01, 2016, 05:55:27 PM

Monitoring.

Title: Re: windows file infected
Post by: REDACTED on March 01, 2016, 11:04:44 PM

here is the scan for rg4.dll and rg3.dll from virustotal.com

https://www.virustotal.com/en/file/36541549605605f20df3533269fcc6a21dbb921bcc0cea7798bbb2f5699cb7ca/analysis/ (https://www.virustotal.com/en/file/36541549605605f20df3533269fcc6a21dbb921bcc0cea7798bbb2f5699cb7ca/analysis/)
https://www.virustotal.com/en/file/d1288720c5eb95fe8d17ae3e3dbab6f265455ff8182efdb3a429b2fcbef362d1/analysis/ (https://www.virustotal.com/en/file/d1288720c5eb95fe8d17ae3e3dbab6f265455ff8182efdb3a429b2fcbef362d1/analysis/)

Title: Re: windows file infected
Post by: Pondus on March 01, 2016, 11:31:02 PM

Analysis date:   2015-03-09 13:52:33 UTC ( 11 months, 4 weeks ago )

Analysis date:   2015-02-23 03:23:10 UTC ( 1 year ago )


as i said in post above  >>   if tested before, click rescan for a fresh result

anyway seem to be a clear case of infected files

Title: Re: windows file infected
Post by: REDACTED on March 05, 2016, 01:55:58 AM

Quote from: Pondus on March 01, 2016, 11:31:02 PM

Analysis date:   2015-03-09 13:52:33 UTC ( 11 months, 4 weeks ago )

Analysis date:   2015-02-23 03:23:10 UTC ( 1 year ago )


as i said in post above  >>   if tested before, click rescan for a fresh result

anyway seem to be a clear case of infected files

is it okay to remove the file and nothing wil goes wrong with my windows later?