Sign in to follow this  
sandy

Trace.File.FakeAntivirus!A2 [Resolved]

Recommended Posts

Anything to worry about? I did submit for evaluation and just ignored for now.

Using XP SP2, Avira antivirus, windows firewall.

Thanks, Sandy

a-squared Free - Version 4.5

Last update: 2/23/2010 11:35:56 AM

Scan settings:

Scan type: Smart Scan

Objects: Memory, Traces, Cookies, C:\WINDOWS\, C:\Program Files

Scan archives: On

Heuristics: Off

ADS Scan: On

Scan start: 2/23/2010 11:36:38 AM

c:\documents and settings\all users\desktop\antivirus.lnk detected: Trace.File.FakeAntivirus!A2

Scanned

Files: 48948

Traces: 673737

Cookies: 17

Processes: 34

Found

Files: 0

Traces: 1

Cookies: 0

Processes: 0

Registry keys: 0

Scan end: 2/23/2010 11:57:20 AM

Scan time: 0:20:42

Share this post


Link to post
Share on other sites

Hi sandy,

That was a correct thing to submit a suspect(s)

At the same time the Smart Scan result shows presence of the Trace only (see p.s.)

The “antivirus.lnk” (in ...User(s)\Desktop\ ...) could be the sign of rogue “Personal Antivirus“ or its leftovers

That cannot be said for sure from info provided, so there is no reason to worry at the moment

and wait for the result from EMSI developers

Have you tried to remove/quarantine some other detections by a2 / Avira (or any other security)?

In any case you may run the Deep Scan just in case

Please next time attach the report instead of in-line posting.

My regards

p.s. meanwhile you can read this article Spyware Traces in Detail, they may not necessarily represent danger,... but it always better to check

  • Downvote 1

Share this post


Link to post
Share on other sites

Lynx, no, I haven't tried to remove or quarantine any other detections. A deep scan turned up only the same Trace.

I'll remember about the attachment.

Thanks

Share this post


Link to post
Share on other sites

Lynx, just an update. I think I solved the mystery of the Trace file, actually with your help.

On my desktop one of my shortcuts is for Avira Antivirus. For some reason I stupidly decided to rename a few shortcuts including the one for Avira. Yes, it was renamed to Antivirus. A-squared apparently picked up on this. When I changed the shortcut name back to Avira Antivirus, no detection of any kind. When you asked if I removed anything, I remembered I had.

I now need to learn to leave well enough alone!

Thanks, Sandy

Share this post


Link to post
Share on other sites

Thanks a lot for this (and such) update, Sandy

That's the one that can bring a good smile and improve a mood :)

So, not only

...The “antivirus.lnk” (in ...User(s)\Desktop\ ...) could be the sign of rogue “Personal Antivirus“ or its leftovers
... but
...decided to rename a few shortcuts including the one for Avira. Yes, it was renamed to Antivirus...
specifically renamed like that Avira's shortcut...

We are glad that the issue is sorted out. Cheers!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.