question

[shrine]

Hi im new here and i got a question, i scanned my drive with avast and it found C:\Program Files\WinRAR\Zip.SFX [L] Win32:Trojan-gen. {UPX!} , the weird thing is that it's in the winrar.exe installation program too (its packed with the application), does anyone know if its really a virus or a false positive?

[raman]

Yes, it is a false alarm, nothing to worry about. Do not ask me, why they don´t fix it.

[shrine]

thank you  

[W4WMM]

I found this "Win32:Trojan-Gen (UPX!)" on my system also.

I deleted the "corupt" file.  It was called "i2BA.tmp."

Have I messed something up?  Everything seems to be working OK but then I haven't been able to test *everything*, what should I do, anything?

Alan

[Eddy]

If you look at the extension of that file, you will see it is a temporary file. A lot of the malware is using temp files to infect a system. I suggest you run a boot scan to see if something else comes up. Better safe than infected.

[W4WMM]

I did and it came up clean but what had me concerned was the previous message that said it was a "false positive" so I was afraid I deleted something important.

[Eddy]

Nope, nothing to worry about. And if you look at the first post here, you will see that it is about a legitimate winrar file. Also if you look at the date you will see that it is a rather old post.

If a false positive is detected, Alwil fixes this normally with the next vps release.

[W4WMM]

Thank you!