Author Topic: WZCNFLCT.EXE False Positive?  (Read 11164 times)

0 Members and 1 Guest are viewing this topic.

Offline Bub12

  • Jr. Member
  • **
  • Posts: 79
WZCNFLCT.EXE False Positive?
« on: February 27, 2011, 06:50:47 PM »
Avast is detecting & REMOVING, wzcnflct.exe, which I believe is a trusted Windows file. When I restore it, Avast only again removes the file when I am in the containing folder of said file.

Any thoughts on this? Thanks!
« Last Edit: February 27, 2011, 06:54:10 PM by Bub12 »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: WZCNFLCT.EXE False Positive?
« Reply #1 on: February 27, 2011, 07:07:28 PM »
I don't have any file of this name on my HDD...
What makes you think it's a file belonging to the OS?
What version of Windows are you running?

Thanks
Vlk
« Last Edit: February 27, 2011, 07:14:42 PM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2100
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

doktornotor

  • Guest
Re: WZCNFLCT.EXE False Positive?
« Reply #3 on: February 27, 2011, 07:13:41 PM »
A legit one was shipped with a rather obsolete MS SQL Server version. Maybe also MS Jet. Anyway, all this stuff is 10+ years old.  ???

Offline Bub12

  • Jr. Member
  • **
  • Posts: 79
Re: WZCNFLCT.EXE False Positive?
« Reply #4 on: February 27, 2011, 07:35:04 PM »
Quote
What makes you think it's a file belonging to the OS?
What version of Windows are you running?

Well, I am XP on a 6 year old pc, & like Gopher John pointed out, there is talk of this file on microsoft.com

So, I thought this to be an FP, & I need Avast to stop removing it, so it would seem.

TY

doktornotor

  • Guest
Re: WZCNFLCT.EXE False Positive?
« Reply #5 on: February 27, 2011, 07:39:31 PM »
So, I thought this to be an FP, & I need Avast to stop removing it, so it would seem.

Unless you installed MSSQL Server 7 then the file should not be on your system at all. A Virustotal scan would help.

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2100
Re: WZCNFLCT.EXE False Positive?
« Reply #6 on: February 27, 2011, 07:50:07 PM »
Quote
What makes you think it's a file belonging to the OS?
What version of Windows are you running?

Well, I am XP on a 6 year old pc, & like Gopher John pointed out, there is talk of this file on microsoft.com

So, I thought this to be an FP, & I need Avast to stop removing it, so it would seem.

TY

I don't have wzcnflct.exe on this machine, with up to date WinXP Pro SP3.  Machine is a circa 2005 Dell.  Either something you installed placed it there, or malware is using that filename to stay below the radar.  As doktornotor stated, submit the file to VirusTotal for scanning.  Post the link to the results back here.
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline jjavast

  • Newbie
  • *
  • Posts: 7
Re: WZCNFLCT.EXE False Positive?
« Reply #7 on: February 27, 2011, 08:10:40 PM »
hello everyone,

I got same problem today !  

Avast found "WZCNFLCT.EXE"

"Win32:Malware-gen" has been found in "C:\Program Files (x86)\Common Files\microsoft shared\Database Replication\WZCNFLCT.EXE" file. 

"Win32:Malware-gen" has been found in "\\localhost\C$\@GMT-2011.02.25-16.46.09\Program Files (x86)\Common Files\microsoft shared\Database Replication\WZCNFLCT.EXE" file.

I don't know what to do ?!

Thank you


(my OS is WIN 7 HOME)
« Last Edit: February 27, 2011, 08:15:25 PM by jjavast »

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: WZCNFLCT.EXE False Positive?
« Reply #8 on: February 27, 2011, 08:13:13 PM »
No problem here.
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

Offline jjavast

  • Newbie
  • *
  • Posts: 7
Re: WZCNFLCT.EXE False Positive?
« Reply #9 on: February 27, 2011, 08:19:38 PM »

"WZCNFLCT.EXE" might be infected ??  or that's a False Positive ?

I am lost....

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2100
Re: WZCNFLCT.EXE False Positive?
« Reply #10 on: February 27, 2011, 08:26:41 PM »

"WZCNFLCT.EXE" might be infected ??  or that's a False Positive ?

I am lost....

As already stated in this thread, send it to http://www.virustotal.com/ and post the results link back here in this thread.
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner


doktornotor

  • Guest
Re: WZCNFLCT.EXE False Positive?
« Reply #12 on: February 27, 2011, 08:43:15 PM »
Hmmm, much more clear now...  ;D Not detected there by Avast at all.

People having the problem here should post exact Avast and virus database versions at least.

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: WZCNFLCT.EXE False Positive?
« Reply #13 on: February 27, 2011, 08:46:40 PM »
G-Data Engine B (avast!) detect It as generic type of Malware. But avast! not.  ???
It should be FP.
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

Offline jjavast

  • Newbie
  • *
  • Posts: 7
Re: WZCNFLCT.EXE False Positive?
« Reply #14 on: February 27, 2011, 08:58:15 PM »
???  ???

Ok, with VirusTotal.com result, only for GData that's a Malaware.

But why my "Avast 4.8" found that file is infected by Malware ??

- as you said maybe a False Positive...

I am going to upgrade to Avast 5, and I ll check again.