AVG Anti Virus 8 seems to be detecting the uninstall.exe file within the C:\Program Files\Scratch directory as virus "Worm/Generic.IMQ". I believe it is a false positive, but I cannot verify that with some online scanners as avg won't allow me to upload it anywhere. AVG's site doesn't have any info on the virus and a google search doesn't turn up anything.
Any input?
Offline
I've just logged in to look for an answer to the same question. As well as the uninstall.exe file, I've also had the install.exe file flagged as a worm by AVG 8. Anybody else had a similar problem, and can anyone confirm (or otherwise) the result from AVG?
Offline
I attempted to re-download the install file and just as Firefox finished the download, AVG flagged it as the same virus as the uninstaller. I decided to uninstall AVG and installed Avast anti virus. Avast did not flag either files as viruses. I then uploaded the uninstall.exe file to virus.org and all the scanners showed it as clean except for AVG. Clearly something in AVG's latest definition update is flagging these two files as a virus. I am sure this is a false positive and there is nothing wrong with the files. I have had Scratch installed on my system since it was available and have never had it's uninstaller flagged.
Looks like somebody from Scratch needs to get in touch with someone from Grisoft and have them fix their virus defs. For now, I am going to stay with avast. I didn't like the new AVG anyway.
Offline
I was thinking the same thing regarding the false positive, and if you've tested it with Avast then that seems to confirm it. I think the problem is with AVG rather than Scratch. Thanks for putting my mind at rest!
Offline
To those who are in doubt, let me be a voice of caution to you.
Not all AV programs will carry same definitions as a next leading brand, so you will not get one AV scanner giving your the full cover you may be getting from another.
I have just had this virus flagged in FireFox, not just one exe file but 3 and they were in the firefox browser for my U3 flash drive. The FireFox install on my hard drive was not infected.
I had AVG 8 test both C:\ and the H:\ drive & C:\ was clean whereas H:\ (the Flash Drive) was not.
UNLESS Grisoft admit that theirs a bug, NEVER believe threads and posts in forums claiming to be some kind of authority on the matter, these are usually bogus claims.
I believe that my infection came by way of Bit Torrent and the fact that the modem I have had NetBios running ! which I have now killed off. Thanks Guys @ 3 Telecom for making broadband dangerous again.
Offline
This file was clearly a false positive. I re-ran the scan at virus.org this morning and AVG is not flagging it anymore. Additionally, a Google search this morning showed that users of FLAC were also experiencing the same problem yesterday with it's uninstaller being flagged by AVG's latest defs.
I would update your virus defs and re-scan the files that were flagged. If you are still unsure, you could upload them to virus.org and see what 20 other anti-virus packages say.
Offline
sbcadguy wrote:
This file was clearly a false positive. I re-ran the scan at virus.org this morning and AVG is not flagging it anymore. Additionally, a Google search this morning showed that users of FLAC were also experiencing the same problem yesterday with it's uninstaller being flagged by AVG's latest defs.
...
Yes, you will find that, especially after AVG has removed the virus after the first scan! Any further scans will reveal no infection.
It would be interesting if these people were using any particular type of p2p client or p2p network at the time and if so what protocol. I have had viruses installed on my PC via BT before now and I wouldn't put it past BT to have been partly to blame for the incident as well as an early version of FireFox browser as well as that, I discovered that my modem was set to use NetBIOS something I have killed off, so I don't think that helped either.
Last edited by netbuddy (2008-07-05 14:11:31)
Offline
I will tell you now that neither are viruses. No idea why installer.exe is being flagged, but uninstaller.exe may be being flagged because it deletes your project folder by accident - getting rid of all of your projects. (This was fixed in Scratch 1.2.) Some people may have thought it was wiping their hard drive because it was deleting files it shouldn't have, and went to virus.org or told AVG it was a virus?
Offline
Seems like the latest update from AVG doesn't recognize it as a virus anymore. It was a false positive. It happens.
Offline
Thats why i use Comodo Internet Security! well, i use it because its free...
Offline
torterra471 wrote:
Thats why i use Comodo Internet Security! well, i use it because its free...
you bumped an almost year old topic
Offline
you should get avg 8.5 but strange ! I use avg and no viruses found !
Offline
This topic is old and has been fixed.
It was an error in AVG's latest virus definitions *at that time* - virus definitions are changed continuously and the error was taken out by AVG. So, I am closing this topic.
Offline