Win32:Trojan-gen {Other} in file/libxslt.dllMH_1612

[royhew]

Hi I have been very happy with Avast home edition it does not slow my machine and has found a virus on the odd one arrives.
Recently it has detected the virus above when I use Systran personal 5.0
I have it on a laptop as well and it also found the virus on the same day.
I have been using Avast and Systran for a number of years with no problem.
I have done a full scan and doubled checked using Symantec on line virus check and no virus found.
Systran say quote' The file libxslt.dll is part of SYSTRAN.  If your anti-virus program
provides a method of unblocking specific files, you should instruct it
to do so for libxslt.dll.'
Does anyone agree and is not unsafe to unblock specific files and how do I do it?

will be grateful for any advice.

Royhew


 

[DavidR]

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.

[royhew]

 Thanks but I am a bit confused the VirusTotal - Multi engine on-line virus scanner detected the following:
 
AntiVir                  TR/Dropper.Gen
Avast         Win32:Trojan-gen {Other}
Gdata         Win32:Trojan-gen
K7AntiVirus      Trojan.Win32.Malware.1
Webwasher-Gateway    Trojan.Dropper.Gen

As it was not reported by some of the big names it is a false positive or that they did not pick it up?

thanks again
Roy

[DavidR]

They all look like generic detections (-gen or .gen) where they are trying to detect multiple variants of the same type of malware and this is more prone false detection.

So I think this is an FP, so you should submit the sample as in the 'how to report it to avast and what to do to exclude' link.

[wyrmrider]

Please submit per DavidR
also you might want to scan with:
malwarebytes Anti Malware   check any baddies and Click REMOVE CHECKED- a backup will be made- post the log
Spybot search and destroy,
AND/or
SuperAntiSpyware
Quarantine do not remove/delete

you'll sleep better with a second opinion


run Secunia software inspector and get everything up to date

[royhew]

Thanks all ok now.
Keep up the good work

[DavidR]

No problem, glad I could help.

Welcome to the forums.