"C:\Windows\servicing\TrustedInstaller.exe"

[bromberg]

Avast! just reported the file "C:\Windows\servicing\TrustedInstaller.exe" as being a rootkit and suggested to delete it.  I did so and now I'm reading this was probably a false positive. Can I just copy it to the "C:\Windows\servicing" directory from my other 64 bit PC?

Thanks,
Dan

[CharleyO]

***

Welcome to the forums, Dan   

I can not say that it will work but it should not hurt to try.

I will guess that you do not have an OS cd but if you do, you could try installing it from the cd or do an over-install with the cd.


***

[bromberg]

Charley,

Thanks for your reply; Vista was loaded on my PC when I bought it so I only have the recover disks I created. Any idea why Avast! suddenly reported on this M$ file?

Dan

[xqrzd]

I reported this as well: http://forum.avast.com/index.php?topic=61636.0
Some other people have reported it as well, but so far avast team doesn't seem to be addressing the issue...

[RockStar21]

I deleted mine too.  Can somebody please upload a copy for Windows 7 x64?

[Tarq57]

Some excellent examples in this thread of why one should always quarantine, and not delete suspicious files.

[xqrzd]

Some excellent examples in this thread of why one should always quarantine, and not delete suspicious files.

There is no quarantine option for the rootkit detection. Only delete and ignore.

[Tarq57]

Oh.
Never had a rootkit warning.

[Black Mamba]

Having the same issue. Didn't uninstall it, but at the same time why is it giving a false positive?

Also how does one put an avatar on your profile?

Thanks

[Black Mamba]

I hit the X and it still deleted it. Its gone now and I am screwed.

[Tarq57]

Having the same issue. Didn't uninstall it, but at the same time why is it giving a false positive?

Also how does one put an avatar on your profile?

Thanks

All, or almost all security programs will have a false detection occasionally. Avast is usually very good at fixing these. Because of the way the NFTS works, both legitimate and malicious applications can be detected as rootkits, unfortunately.

You won't be able to access some items of your profile until you have 20 posts, a spam reducing measure. The forum gets quite a bit of spam. This step heavily limits it, while unfortunately limiting legitimate users for a time.

I hit the X and it still deleted it. Its gone now and I am screwed.

I've posted to your other thread. Also look at the links to the other forum topics on this, above. Hopefully you are not screwed.