« previous next »
Pages: 1 [2] 3 4   Go Down

Author Topic: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"  (Read 64398 times)

0 Members and 1 Guest are viewing this topic.

antonpaco

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #15 on: December 15, 2008, 02:00:43 PM »
same file, same problem, at 13.52 avast sent a new update, may be the problem has been fixed.
DO NOT ELIMINATE THE FILE.
Logged

falcon710

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #16 on: December 15, 2008, 02:02:03 PM »
Quote from: Maxx_original on December 15, 2008, 01:56:06 PM
sorry, my mistake... it's a false positive.. fixed VPS should be available already...


all we make errors ;D
Logged

mansteel

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #17 on: December 15, 2008, 02:11:45 PM »
the problem was solved by the vps?
 ???


Quote from: falcon710 on December 15, 2008, 02:02:03 PM
Quote from: Maxx_original on December 15, 2008, 01:56:06 PM
sorry, my mistake... it's a false positive.. fixed VPS should be available already...


all we make errors ;D
Logged

Offline N@URINE

  • Full Member
  • ***
  • Posts: 167
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #18 on: December 15, 2008, 02:12:20 PM »
with VPS 081215-1, the problem is fixed :)

Quote from: falcon710 on December 15, 2008, 01:58:40 PM
this morning I have had the same problem >:( >:( >:(. now I have the 081215-1 version of the VPS.   The problem has been resolved? ???
Logged
NourinE

Offline N@URINE

  • Full Member
  • ***
  • Posts: 167
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #19 on: December 15, 2008, 02:13:40 PM »
yes, no more pop-up concerning ils.dll in system32
 :) :) :) :) :) :)

Quote from: mansteel on December 15, 2008, 02:11:45 PM
the problem was solved by the vps?
 ???


Quote from: falcon710 on December 15, 2008, 02:02:03 PM
Quote from: Maxx_original on December 15, 2008, 01:56:06 PM
sorry, my mistake... it's a false positive.. fixed VPS should be available already...


all we make errors ;D
Logged
NourinE

mansteel

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #20 on: December 15, 2008, 02:15:10 PM »
scan needs to solve the problem?


Quote from: NourinE on December 15, 2008, 02:12:20 PM
with VPS 081215-1, the problem is fixed :)

Quote from: falcon710 on December 15, 2008, 01:58:40 PM
this morning I have had the same problem >:( >:( >:(. now I have the 081215-1 version of the VPS.   The problem has been resolved? ???
Logged

primeuser

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #21 on: December 15, 2008, 02:16:15 PM »
Yup, just happened to me about an hour ago... also by heuristic method, XP Pro MCE 2005 here, I deleted it and it said it was gonna send it to Avast for analysis...

I guess we'll find out soon enough... if need be, I can re-install netmeeting at some future time, but I haven't used netmeeting in a long long time anyway, so no big loss...
Logged

tukso_n_march

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #22 on: December 15, 2008, 02:20:51 PM »
[color=green]I GOT THE SAME WARNING, I GUESS WE ALL AVAST HOME USERS GOT IT AFTER THE DATABASE WAS UPDATED![/color]  ???
Logged

Offline N@URINE

  • Full Member
  • ***
  • Posts: 167
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #23 on: December 15, 2008, 02:21:47 PM »
as I know the rootkit is scanned automatically at the start up. if there's something wrong a pop-up window will show up in few seconds or minutes after the startup

Quote from: mansteel on December 15, 2008, 02:15:10 PM
scan needs to solve the problem?


Quote from: NourinE on December 15, 2008, 02:12:20 PM
with VPS 081215-1, the problem is fixed :)

Quote from: falcon710 on December 15, 2008, 01:58:40 PM
this morning I have had the same problem >:( >:( >:(. now I have the 081215-1 version of the VPS.   The problem has been resolved? ???
Logged
NourinE

radar9077

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #24 on: December 15, 2008, 04:45:41 PM »
I've read a few topics and this one seems to fit my situation perfectly, is it a false positive? and is it fixed yet?

I've restarted my computer, and it is scanning it, when thats done I'll wait 8min to see if it pops up :)

If someone could explain this in english(non tech lingo) I would appreciate it, thanks ;)
Logged

martosurf

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #25 on: December 15, 2008, 05:08:15 PM »
i have same issue here, will try updating signatures, but this isn't the issue itself i think because false positives is somewhat 'normal' and you have to expect some of them.


So, this one goes to developers (i post this sugestion here because it's directly related to this topic):

It would be *very nice* if avast! display info on the suspected file like owner, file version, copyright, date & size, time-stamp, etc., the kind of info you get when you google for that file - in this case c:\windows\system32\ils.dll on my XP system.

that way it would be lot easier to know what to do with it.

cheers
Logged

radar9077

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #26 on: December 15, 2008, 05:19:40 PM »
finally finished and at 8min it popped up again, how do you update it?
Logged

qim

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #27 on: December 15, 2008, 05:49:16 PM »
When I saw the warning I DELETED the file ils.dll

Now what should I do?  Is that file needed by Windows or another programme?  Where shouls I find it now?

Thank you
Logged

anupupadhye

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #28 on: December 15, 2008, 05:53:55 PM »
i got d same msg today "suspicious file". advised me 4 a boot time scan... after starting boot scan it came on a file (dont remember d name), and den d hole system bcame as it is... nothing worked. i hd to restart my pc..
i was facing d same problem with avast a few days b4... when th scan would reach a perticular file, it was ntservicepackuninstall.dll, system wuld hang and i hd 2 restart. i deleted the particular file and it it was ok den since avast culd not reach the file for scaning.
and now im facing d same prob... i cant del alll the files on which avast malfunctions as de might be important... wat to do now. pls help
Logged

anupupadhye

  • Guest
Re: Suspicious file found in rootkit hidden process "C:\windows\system32.\ils.dll"
« Reply #29 on: December 15, 2008, 05:59:22 PM »
hi qim, can we chat? we can solve our probs
Logged
Pages: 1 [2] 3 4   Go Up
« previous next »