Win32:Deleter [Tool]

[thomas.s]

Hi,

I just bought a new MP3 player today, and when I tried to install the driver from the CD that came with it (I am still running Windows 98SE), Avast came up with an alarm that a malware program "Win32:Deleter [Tool]" was detected.
However, when I had the corresponding file scanned online at virustotal.com, only one other virus scanner apart from Avast detected a problem here (see http://www.virustotal.com/analisis/6cae6aa108f10826789a22c66de6d878 ).

Can I assume that this a false alarm and may be disable Avast for the installation of the driver?

Thomas

[DavidR]

I would say you could consider it an FP, and should be sent to avast for analysis and correction.

If it is indeed a false positive (probably), see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.

[Lisandro]

Can I assume that this a false alarm and may be disable Avast for the installation of the driver?

Can you wait the false positive correction? I think it will be better and safer for the installation. They usually correct this is few hours or one day...

[thomas.s]

Thanks for the response.

I have emailed the file in question to Avast and I am waiting for an analysis first before I go any further here.

Thomas

[DavidR]

No problem, glad I could help.

Whilst it normally doesn't take long to correct an FP once analysed, I would normally agree on waiting, the VirusTotal result is pretty clear as only avast and gdata (avast is one of two scanners that it uses) see any problem. So if you have any urgency to install this driver so you can use your mp3 player you should probably be OK to proceed.

Welcome to the forums.

[thomas.s]

Just an update here:

I downloaded new virus definitions today, and Avast now doesn't see any problems anymore with the file, so it appears that it was indeed a false positive which has been corrected now.

I have installed the driver for my MP3 player subsequently without any problems.

Thomas

[DavidR]

Thanks for the update.