Author Topic: Windows 7 Service pack 1 installed. Virus warning is a FALSE POSITIVE  (Read 44793 times)

0 Members and 1 Guest are viewing this topic.

Offline filc

  • Newbie
  • *
  • Posts: 9
Hi Folks,

I just installed SP1 for W7 and now it's saying I have a virus.
Quote
Original file name:   mscorlib.dll
Original folder:   c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9EFD.tmp
Original size of file:   11490304
Last Modification Time:   3/1/2011 8:19:57 PM
Time of transfer to Chest:   3/1/2011 1:19:58 PM
Category:      Infected files
Virus Decsription:   Win32:Spyeye-BG[Trj]
File ID:      18

It's annoying because the "Trojan Horse Blocked" message is spamming my desktop every few minutes. It says no further action is required but just keeps popping up!

Any thoughts?
« Last Edit: March 02, 2011, 01:17:30 AM by filc »

Offline essexboy

  • Malware removal instructor
  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Windows 7 Service pack 1 installed a virus?
« Reply #1 on: March 01, 2011, 10:35:02 PM »
Upload as a false positive from the chest

Offline androo

  • Newbie
  • *
  • Posts: 2
Re: Windows 7 Service pack 1 installed a virus?
« Reply #2 on: March 01, 2011, 10:39:03 PM »
I get the exact same thing, I have installed SP1 on my work PC that is protected by Sophos and it went fine, used the same DVD to install, so it must be false..or the infection is only showing since sp1 update (if its real)..

Offline essexboy

  • Malware removal instructor
  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Windows 7 Service pack 1 installed a virus?
« Reply #3 on: March 01, 2011, 10:40:41 PM »
I have no problems with SP1 myself so definitely comes under the heading weird

Offline CaptainLeonidas

  • Jr. Member
  • **
  • Posts: 75
  • Security rests between the display and the chair.
Re: Windows 7 Service pack 1 installed a virus?
« Reply #4 on: March 01, 2011, 10:43:01 PM »
Lovely a false positive that keep coming back and back and back....

I don't even get the time to fill in the feed-back form before another pops up again.
« Last Edit: March 01, 2011, 10:47:34 PM by CaptainLeonidas »
OS's used: Windows 10 Pro (x64) 1607 <-> Windows 7 Ult (x64) <-> Windows 8.1 Ult (x64) <-> Windows 2012 Essentials R2 (x64)
Avast Internet Security (sub for 10 PC's), HPM.Alert, Malwarebytes, Asus-x99 Deluxe/U3.1 (Intel Core i7 X980 EE - 64Gb Ram - NVidia Geforce x980 - Samsung PCI-e 950Pro 512 SSD), Microsoft Surface Pro 4 (6th Gen Intel Core i7 CPU - 16Gb Ram - 512 SSD)
When installing Avast! be sure to use the custom install... never the default!

Offline filc

  • Newbie
  • *
  • Posts: 9
Re: Windows 7 Service pack 1 installed a virus?
« Reply #5 on: March 01, 2011, 10:50:45 PM »
Ahh so I am not alone in this, thats good.

Offline Paul73D

  • Newbie
  • *
  • Posts: 3
Re: Windows 7 Service pack 1 installed a virus?
« Reply #6 on: March 01, 2011, 10:51:09 PM »
Hi

Have the same problem after installation of Service Pack 1 today.
I was able to fill the form. The information will be uploaded with the next virus definition update.
I put the link to this thread as additional information.
But I do not feel well to suppress the message :o. Is it really not an infected file downloaded from Microsoft? ???

Best regards
Paul

Offline CaptainLeonidas

  • Jr. Member
  • **
  • Posts: 75
  • Security rests between the display and the chair.
Re: Windows 7 Service pack 1 installed a virus?
« Reply #7 on: March 01, 2011, 10:55:29 PM »
add another file to the list:
mscorlib.ni.dll

Same alert as the mscorlib.dll

For the record I am using Windows 7 x64 Ultimate
Avast! AIS6 installed (latest update)
« Last Edit: March 01, 2011, 11:02:58 PM by CaptainLeonidas »
OS's used: Windows 10 Pro (x64) 1607 <-> Windows 7 Ult (x64) <-> Windows 8.1 Ult (x64) <-> Windows 2012 Essentials R2 (x64)
Avast Internet Security (sub for 10 PC's), HPM.Alert, Malwarebytes, Asus-x99 Deluxe/U3.1 (Intel Core i7 X980 EE - 64Gb Ram - NVidia Geforce x980 - Samsung PCI-e 950Pro 512 SSD), Microsoft Surface Pro 4 (6th Gen Intel Core i7 CPU - 16Gb Ram - 512 SSD)
When installing Avast! be sure to use the custom install... never the default!

Offline damonwilliams

  • Newbie
  • *
  • Posts: 1
Re: Windows 7 Service pack 1 installed a virus?
« Reply #8 on: March 01, 2011, 11:03:09 PM »
Having the same exact issue as well.. All After installing Windows 7 SP1, system was fine all day until I installed the service pack... Now nothing but alerts every 5 seconds...


Windows 7 x64 Ultimate
Avast Program Version: 6.0.1000
Virus Definitions: 110301-1
« Last Edit: March 01, 2011, 11:05:16 PM by damonwilliams »

Offline richidixon

  • Newbie
  • *
  • Posts: 1
Re: Windows 7 Service pack 1 installed a virus?
« Reply #9 on: March 01, 2011, 11:06:32 PM »
I just downloaded Windows 7 Service pak 1 and have the same problem.  HELP!

Offline CaptainLeonidas

  • Jr. Member
  • **
  • Posts: 75
  • Security rests between the display and the chair.
Re: Windows 7 Service pack 1 installed a virus?
« Reply #10 on: March 01, 2011, 11:07:53 PM »
Well, I am not NOT going to install SP1 on another PC I have. Else I might have another PC having issue's in the end.

(Guess I will come back to the forum to see if it has been resolved or I might even read about it in the news... www.h-online.com might report it. They did so with other false possitive in the past too of other anti-virus vendors.)
OS's used: Windows 10 Pro (x64) 1607 <-> Windows 7 Ult (x64) <-> Windows 8.1 Ult (x64) <-> Windows 2012 Essentials R2 (x64)
Avast Internet Security (sub for 10 PC's), HPM.Alert, Malwarebytes, Asus-x99 Deluxe/U3.1 (Intel Core i7 X980 EE - 64Gb Ram - NVidia Geforce x980 - Samsung PCI-e 950Pro 512 SSD), Microsoft Surface Pro 4 (6th Gen Intel Core i7 CPU - 16Gb Ram - 512 SSD)
When installing Avast! be sure to use the custom install... never the default!

Offline filc

  • Newbie
  • *
  • Posts: 9
Re: Windows 7 Service pack 1 installed a virus?
« Reply #11 on: March 01, 2011, 11:11:08 PM »
Here is what you can do for now. Press the "PIN" on the top right next to the X on the warning dialog box. That at least will keep it from popping up every 30 seconds, but it will remain there. So you have to judge for yourself which is more annoying.

Then all we can do now is wait for definition updates. =p

Offline gordon861

  • Newbie
  • *
  • Posts: 8
Re: Windows 7 Service pack 1 installed a virus?
« Reply #12 on: March 01, 2011, 11:14:21 PM »

Getting the same thing here as well, done an update on the program and definitions and still getting it.

Offline Paul73D

  • Newbie
  • *
  • Posts: 3
Re: Windows 7 Service pack 1 installed a virus?
« Reply #13 on: March 01, 2011, 11:18:34 PM »
Hi

I pressed the x pin on the top left of the window and it was closed.
But a new message is displayed just after ~2 minutes.
But I could temporary stop the message permanently: I stopped the service named "Microsoft .NET Framework NGEN v4.0.30319_X86".
This was consuming my CPU very much because of the high avast activity caused by the messages above.
Now the CPU load is down and the messages disappears. But with the next machine start the service will start again automatically. Not sure if I should disable the service complete.

Kind regards
Paul

Offline sjw71

  • Newbie
  • *
  • Posts: 1
Re: Windows 7 Service pack 1 installed a virus?
« Reply #14 on: March 01, 2011, 11:24:05 PM »
I have the same file in the same location but with no continuous popups.

I installed SP1 days ago bu this morning was the first time that the warning appeared.

Maybe Avast update & ignore it?

Cheers :)