Author Topic: why avast report "cisvc.exe" is virus  (Read 3064 times)

0 Members and 1 Guest are viewing this topic.

mpokky

  • Guest
why avast report "cisvc.exe" is virus
« on: June 23, 2007, 04:38:52 PM »
why did avast report like this "Sign of "Win32:Trojan-gen. {VC}" has been found in "C:\WINNT\system32\dllcache\cisvc.exe" file.  "

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: why avast report "cisvc.exe" is virus
« Reply #1 on: June 23, 2007, 04:44:21 PM »
To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.
VirusTotal and Jotti both have file size limits 10 and 15MB each.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be carefull, you should 'exclude' that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file -  there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
The best things in life are free.

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89428
  • No support PMs thanks
Re: why avast report "cisvc.exe" is virus
« Reply #2 on: June 23, 2007, 07:07:12 PM »
I'm just wondering why an exe file is in the dllchche ?

There is at least one other topic relating to cisvc.exe, http://forum.avast.com/index.php?topic=28976.0,

I guess it would have to depend on the location, as a legit system file it would be in, so it would be best to confirm using VT or jotti as Tech suggests.

However, cisvc.exe:
http://www.castlecops.com/s1203-cisvc_exe.html
Quote
Description   "Family Keylogger - is your best choice, if you want to know what other users on your machine are typing". Note! - this is not the cisvc.exe service.

Key loggers can be used for good or for harm and avast isn't going to know the use it is put to. So did you install Family Keylogger ?
If so you could exclude the file from scans.

I would suggest you look at something that is more proactive than a key logger which only tells you 'after the fact' something like,  Naomi Parental Control software (freeware) http://www.radiance.m6.net/
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: why avast report "cisvc.exe" is virus
« Reply #3 on: June 23, 2007, 07:25:44 PM »
I would suggest you look at something that is more proactive than a key logger which only tells you 'after the fact' something like,  Naomi Parental Control software (freeware) http://www.radiance.m6.net/
Fully agree. But after testing, K9 is better, more flexible, less radical (closing the browser).
It worth a test (www.k9webprotection.com).
The best things in life are free.