Author Topic: Win32:Malware-Gen  (Read 3595 times)

0 Members and 1 Guest are viewing this topic.

cthorn22

  • Guest
Win32:Malware-Gen
« on: December 24, 2009, 06:39:41 AM »
Hello, been away for a week and come back and start the computer and immediately get this virus alert.  File is C:\Windows\System32\spool\drivers\w32x86\3\E_FASKEEA.DLL.  I moved it to the virus chest.  After reading some other similar posts I uploaded the file to virustotal.com and it said the file was already analyzed and Result: 0/41 (0.00%).  Is this a false positive?  Wanted to check before I start downloading new programs to see what this is.  Thanks!

Jtaylor83

  • Guest
Re: Win32:Malware-Gen
« Reply #1 on: December 24, 2009, 07:21:07 AM »
Send the file in password-protected zip folder to virus@avast.com, with False Positive in subject and the password mentioned in the email body.

You can also send the file from the virus chest to Alwil.

Offline Tarq57

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3694
  • If at first you don’t succeed; call it version 1.0
Re: Win32:Malware-Gen
« Reply #2 on: December 24, 2009, 07:38:37 AM »
Chances are it's a FP. Try updating Avast and re-scanning it from within the chest, if you haven't done so already.
Windows 10,Windows Firewall,Firefox w/Adblock.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Win32:Malware-Gen
« Reply #3 on: December 24, 2009, 05:21:55 PM »
Hello, been away for a week and come back and start the computer and immediately get this virus alert.  File is C:\Windows\System32\spool\drivers\w32x86\3\E_FASKEEA.DLL.  I moved it to the virus chest.  After reading some other similar posts I uploaded the file to virustotal.com and it said the file was already analyzed and Result: 0/41 (0.00%).  Is this a false positive?  Wanted to check before I start downloading new programs to see what this is.  Thanks!

First ensure that your VPS is updates a week is a long time and since there are 0 detections on VT, which includes avast, it may be that your VPS is out of date after your week away.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

cthorn22

  • Guest
Re: Win32:Malware-Gen
« Reply #4 on: December 24, 2009, 06:17:48 PM »
Thanks you guys - looks like just a FP.  My girlfriend actually was the first one to start the computer and showed me the virus alert.  I checked to make sure everything was up to date and it was but it must have been detected and moved to the virus chest before avast updated.  I verified everything was updated again and rescanned it manually and it says no virus.  Thanks again!!!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89335
  • No support PMs thanks
Re: Win32:Malware-Gen
« Reply #5 on: December 24, 2009, 06:57:47 PM »
You're welcome, Merry Christmas.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Tarq57

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3694
  • If at first you don’t succeed; call it version 1.0
Re: Win32:Malware-Gen
« Reply #6 on: December 24, 2009, 11:36:59 PM »
You can restore it from the chest if you haven't done so already. A copy will also remain in the chest for safe keeping. That copy can be deleted once you are satisfied the file is back where it should be.

Merry Christmas.
Windows 10,Windows Firewall,Firefox w/Adblock.