Author Topic: ils.dll => false positive?  (Read 44650 times)

0 Members and 1 Guest are viewing this topic.

Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: ils.dll => false positive?
« Reply #15 on: December 15, 2008, 01:15:01 PM »
Same here... I'm sure it's a false positive. I clicked on Ignore and everything is fine... except that the message pops up every time I scan my computer.



I hope Avast team will remove this FP in the new update.
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Skolkran

  • Guest
Re: ils.dll => false positive?
« Reply #16 on: December 15, 2008, 01:24:50 PM »
I 'v just also got a warning from avast , it detected a virus in the ils.dll file in the windows\system32 folder. Type : Rootkit
This happened on 2 of my computers (laptop and other) at almost the same time in this morrning (December 15 th, 2008)

This problem seems to be encountered by many people all around the world and in the same time :-\. It a very strange warning message, not usual ???.

J.

Belgium

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: ils.dll => false positive?
« Reply #17 on: December 15, 2008, 01:41:57 PM »
The fixed VPS was already released - please invoke a VPS update.

rpgreentree

  • Guest
Re: ils.dll => false positive?
« Reply #18 on: December 15, 2008, 01:59:38 PM »
Thank you guys for the info.  Saved me deleting a file that didn't need deleting.

d.werkman

  • Guest
Re: ils.dll => false positive?
« Reply #19 on: December 15, 2008, 02:02:38 PM »
Same problem on my pc and pc's of two friends

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: ils.dll => false positive?
« Reply #20 on: December 15, 2008, 02:23:08 PM »
Same problem on my pc and pc's of two friends

Update your virus database...
I have the problem here also. Seems that all XP SP3 is affected...
The best things in life are free.

frank_rud

  • Guest
Re: ils.dll => false positive?
« Reply #21 on: December 15, 2008, 02:26:56 PM »
Hi, the simple way to solve theis problem is
1. ignore (only in this case)
2. to update vps database (download or click on update with mouse)
3. reboot with scan
4. seems okay

5. later ... use for security a rootkit analyse tool like rootkit revealer or other tools




frank_rud

  • Guest
Re: ils.dll => false positive?
« Reply #22 on: December 15, 2008, 02:30:07 PM »
This take effect not only on XPSp3
nor W2K Sp4, actual updates in use

BigTel

  • Guest
Re: ils.dll => false positive?
« Reply #23 on: December 15, 2008, 02:32:16 PM »
The same just happened to me, I did a boot scan now nothing showing up, also used Acronis to take me back to a previous good build.   

                       

tukso_n_march

  • Guest
Re: ils.dll => false positive?
« Reply #24 on: December 15, 2008, 02:33:03 PM »
GOT SAME THING TOO

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: ils.dll => false positive?
« Reply #25 on: December 15, 2008, 02:39:02 PM »
Hi folks,

If this is the file:
General dll file information
File Name:   ils.dll
File Size in bytes:   81920
File Size in kbytes:   80KB
Advanced dll file information
Company Name:   Microsoft Corporation
Software Product Name:   Windows® NetMeeting®
File version:   5.1.2600.2180
Description:   User Location Services Component Module
Operating System:   NT-Win32
File Type:   App

It is a FP, and then can be ignored. There are reports in from other forums too.
Should be corrected next time round, or already has with the most recent update,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: ils.dll => false positive?
« Reply #26 on: December 15, 2008, 02:40:25 PM »
GOT SAME THING TOO
Don't need to post twice the same.
This is corrected in the last virus database, please, update it.
The best things in life are free.

Mr.Bob4u

  • Guest
Re: ils.dll => false positive?
« Reply #27 on: December 15, 2008, 02:42:11 PM »
I just had the same this morning!
After scanning it comes back again!
 ???

jarrick

  • Guest
Re: ils.dll => false positive?
« Reply #28 on: December 15, 2008, 02:46:41 PM »
I got the same message this morning and went to have a look at the file:

it says it was created on 25/04/2008 and was modified on 14/04/2008 - not sure how it is possible to modify something before it's created - but in any case, looks like it's been there for a while and I haven't noticed anything suspicious yet.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: ils.dll => false positive?
« Reply #29 on: December 15, 2008, 03:35:16 PM »
I just had the same this morning!
After scanning it comes back again!
 ???

Is your avast updated?
The best things in life are free.