 |
07-12-2007, 02:58 PM
|
#1
|
|
TSF Team Emeritus Microsoft Support
Join Date: Jan 2005
Location: Pennsylvania
Posts: 15,123
OS: XP Home SP3 x3 /XP Pro SP3/Vista Ultimate SP2/Win7 Pro 64-BIT
|
AVG Findings: False/Positive???
An Avg scan has found Trojan horse SHeur.AFJ in quickbooks. I find this may be a false/positive can someone elaborate? No hits in Google at all.
|
|
|
07-12-2007, 03:27 PM
|
#2
|
|
TSF Enthusiast
Join Date: Jun 2006
Location: Texas
Posts: 3,459
OS: Experimenter
|
Re: AVG Findings: False/Positive???
I'm not an expert, but I find no mention of this on ca, or anything even close.
|
|
|
07-12-2007, 03:30 PM
|
#3
|
|
Security Team Moderator, Analyst Rangemaster, TSF Academy
Join Date: Sep 2005
Location: Glasgow
Posts: 35,257
OS: Win XP Pro SP3 / Win 7 Pro
|
Re: AVG Findings: False/Positive???
TJ, I find it hard to believe there's a trojan within Quickbooks. Try flinging a couple of those files at Jotti or VirusTotal and see if they come up with anything. A second opinion is definitely required.
|
|
|
07-12-2007, 03:58 PM
|
#4
|
|
TSF Team Emeritus Microsoft Support
Join Date: Jan 2005
Location: Pennsylvania
Posts: 15,123
OS: XP Home SP3 x3 /XP Pro SP3/Vista Ultimate SP2/Win7 Pro 64-BIT
|
Re: AVG Findings: False/Positive???
The thing is, in my Quickbooks, the data1.cab file is there, and its a zip file
|
|
|
07-13-2007, 05:38 PM
|
#5
|
|
Registered Member
Join Date: Jul 2007
Posts: 1
OS: XP
|
Re: AVG Findings: False/Positive???
This is a false positive. The latest virus def 269.10.5.899 from AVG resolve the problem. If you have removed the files, your QuickBooks will still work (the files are for the online tutorial). You can use the add/remove control panel to "repair" your install to get the files back if you or AVG deleted them.
Jon
Sr. Manager
Intuit Inc
__________________
|
|
|
07-14-2007, 07:04 AM
|
#6
|
|
TSF Team Emeritus Microsoft Support
Join Date: Jan 2005
Location: Pennsylvania
Posts: 15,123
OS: XP Home SP3 x3 /XP Pro SP3/Vista Ultimate SP2/Win7 Pro 64-BIT
|
Re: AVG Findings: False/Positive???
Thank you Jon for taking time to reply to this thread. I was almost positive this was a false/positive in the beginning and advised the user to not remove the files and that an AVG update may resolve the issue.
I guess I was correct all along. Thank you for the reassurance and your time
|
|
|
07-25-2007, 02:01 PM
|
#7
|
|
Registered Member
Join Date: Jul 2007
Posts: 1
OS: WINDOWS ME?
|
Re: AVG Findings: False/Positive???
My Ag found the same "trojan horse" in google updater. Once it was removed it found it again in outlook express, claiming to be a backup file.
Edit: Mine is SHeur.JH, so I guess its not quite the same thing
__________________
|
|
|
09-19-2007, 06:57 PM
|
#8
|
|
Registered Member
Join Date: Sep 2007
Posts: 1
OS: XP
|
Re: AVG Findings: False/Positive???
Ironically, my avg found the same "trojan horse" on 7-14, two days after your scan. The only hit I came up with was this forum! It was informative though.
Thanks.
__________________
|
|
|
 |
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
|
All times are GMT -7. The time now is 02:26 PM.