Are these False Positives?

  frostysnowman 16:40 14 Aug 2008
Locked

Hi, I have been using A2free for a while and have never had any problems.
I keep my C Drive imaged and these images are updated regularly and thoroughly checked for any viruses/spyware, etc.
I have today loaded up my last image to update and updated NIS2008 and A2free. I also use Spyware Blaster on the Image and Spybot Search and Destroy.
When I have scanned with A2free it has flagged the following:
Trojan-Dropper.Win32.Agent.rvv
Location: C:\WINDOWS\$NtUninstallwmp11$\setup_wm.exe.
Also I have a Notebook and this is imaged in the same manner. When I have scanned with A2free it has flagged the following:
Trojan-Dropper.Win32.Agent.rvv
Location: C:\WINDOWS\$NtServicePackUninstall$\setup_wm.exe.
Are these anything to worry about? Do I Quarantine them or just leave them? I am puzzled that I get the same trojan on 2 seperate PCs, both in setup_wm.exe.
Any advice appreciated.

  rawprawn 16:52 14 Aug 2008

Forget them, they are just there for safety to uninstall updates if other means fail. They can be deleted if you have no need of them.

  crosstrainer 16:56 14 Aug 2008

The Windows uninstall listings can be ignored.

The trojans are a different matter and need to be removed.

Start in safe mode (F8 key on boot up)

Run spywareblaster or superantispyware if you have it.

Remove the trojans, but leave the Windows items.

  rawprawn 17:30 14 Aug 2008

Thanks, I missed that.

frostysnowman
SuperAntispyware
click here

  frostysnowman 22:12 14 Aug 2008

Thanks for your replies.
I have scanned with all the following:
Norton Internet Security 2008
Spyware Doctor
Spyware Terminator
Super Antispyware
Spybot Search and Destroy
Bit Defender Online Scanner
Kaspersky Online Scanner
Also use Spyware Blaster
All these scanners give the all clear. The only scanner flagging this Trojan is A2free. Could this be a false positive.
The Trojan only came to light when A2free was updated.
Any further advice appreciated.

  DieSse 00:33 15 Aug 2008

"Could this be a false positive."

It certainly could be - and from your evidence it even sounds likely. Take it up with a² as a matter of urgency.

  frostysnowman 10:29 10 Dec 2008

Thanks for your sdvice and sorry for the delay in replying.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Fujitsu Lifebook P727 laptop review

Converse's new logo: the trainer brand looks to its heritage for a fresh identity

Mac power user tips and hidden tricks

Comment lancer Windows 10 en mode sans échec ?