Author Topic: SLplugin.exe Flagged  (Read 922 times)

0 Members and 1 Guest are viewing this topic.

Offline dkap

  • Newbie
  • *
  • Posts: 11
SLplugin.exe Flagged
« on: May 07, 2021, 08:11:33 PM »
Hello,

I was playing SecondLife, a game which I have played for years now... and today while playing I received a pop up from Avast showing Threat Blocked, SLplugin.exe because of IDP.Generic as an issue. I moved the threat to the Virus Chest and then I sent for analysis to Avast through the tab located in the Virus Chest. I use Premium Avast, with the latest update.

I ran a full Virus Scan and nothing came up, but I also Uninstalled SecondLife and deleted any files. I became nervous and did a search and I saw that SLPlugin.exe is often flagged by AV's... but how will I know what Avast found through the analysis whether its a false positive or actually a problem?


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37057
Re: SLplugin.exe Flagged
« Reply #1 on: May 07, 2021, 08:37:11 PM »
Quote
but how will I know what Avast found through the analysis whether its a false positive or actually a problem?

Quote
and then I sent for analysis to Avast through the tab located in the Virus Chest.
Did that include giving your e-mail adress?



Offline dkap

  • Newbie
  • *
  • Posts: 11
Re: SLplugin.exe Flagged
« Reply #2 on: May 07, 2021, 08:59:50 PM »
No, it didn't give that option. It was just had me click Send For Analysis in the Virus Chest from my Premium Security console. In the space where it gave for me to add anything, in terms of notes... I did not give my e-mail address.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85357
  • No support PMs thanks
Re: SLplugin.exe Flagged
« Reply #3 on: May 07, 2021, 09:17:48 PM »
Ordinarily you wouldn't need to give your email address as they would just analyse it and not actually contact you.

Give it a few days and try moving it out of the virus chest (Extract see attached image) and see if Avast alerts again.  Some time ago there used to be an option to scan the file again within the virus chest, I don't know why they removed that option.

When you extract it you can choose where to place it (choose a temporary location) so you can find it if required.  The process of extracting it should cause avast to scan it in the new location.  If it doesn't alert then that would tend to indicate that the first alert on SLplugin.exe was a false positive.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline dkap

  • Newbie
  • *
  • Posts: 11
Re: SLplugin.exe Flagged
« Reply #4 on: May 07, 2021, 10:15:01 PM »
If I extract it, it wouldn't infect my computer while it is extracted out of the chest would it?

If Avast does alert again, I am sure I can just move it back to the Virus Chest through the alert.

If Avast does not alert, should I still get rid of it and maybe download a fresh new install of SecondLife just to be sure?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85357
  • No support PMs thanks
Re: SLplugin.exe Flagged
« Reply #5 on: May 08, 2021, 12:12:37 AM »
Extracting it won't execute it, something has to run the command to execute it. 

Extracting it to a different location than normal would lessen any risk, as you are moving it not executing it. 

Extracting it to a new location would cause Avast to scan it (as a newly created executable file), if it is still considered malicious, back to the virus chest it would go (you don't have to take any action).

If avast does not alert then it is very likely the Send for analysis has found it not to be infected (a false positive).  Virus signatures would be updated.

Yes I would get rid of it from the temporary location and reinstall SecondLife.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Leo3487

  • Jr. Member
  • **
  • Posts: 32
Re: SLplugin.exe Flagged
« Reply #6 on: May 09, 2021, 04:40:29 AM »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85357
  • No support PMs thanks
Re: SLplugin.exe Flagged
« Reply #7 on: May 09, 2021, 02:15:35 PM »
Ensure that you have the latest virus definitions update and you should be good to go.

Presumably you were able to extract it from the virus chest in order to upload it to VirusTotal ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline dkap

  • Newbie
  • *
  • Posts: 11
Re: SLplugin.exe Flagged
« Reply #8 on: May 10, 2021, 04:02:46 PM »
Hey DavidR,

I haven't had time yet to extract the item from the virus chest. I will do so sometime this week. I am glad to see someone else reporting it as a False Positive however, but will still go ahead and follow your advice and see what comes up.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85357
  • No support PMs thanks
Re: SLplugin.exe Flagged
« Reply #9 on: May 10, 2021, 06:30:31 PM »
Hey DavidR,

I haven't had time yet to extract the item from the virus chest. I will do so sometime this week. I am glad to see someone else reporting it as a False Positive however, but will still go ahead and follow your advice and see what comes up.

Yes it looks that way.

When you have time you can confirm - "Ensure that you have the latest virus definitions update and you should be good to go."
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline rocksteady

  • Advanced Poster
  • **
  • Posts: 1143
Re: SLplugin.exe Flagged
« Reply #10 on: May 11, 2021, 03:37:36 PM »
@DavidR. I assume you recognised it was @Leo3487 not the OP @dkap who mentioned false positive on Virustotal.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85357
  • No support PMs thanks
Re: SLplugin.exe Flagged
« Reply #11 on: May 11, 2021, 06:53:15 PM »
@DavidR. I assume you recognised it was @Leo3487 not the OP @dkap who mentioned false positive on Virustotal.

After the fact, but essentially the same outcome, ensure the users have updated their virus definitions and it should be sorted.

It can happen when others enter another topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security