12-07-2008 07:57 PM
I recently purchased a SL500. My antivirus software is sporadically reporting a virus (Generic!Artemis) on file
S:\recovery\iub\iuwork\iuwork\wreboot.exe
If I manually scan the file it reports as clean and if I launch a full scan it reports it as clean. A few scheduled scans have reported it as infected (but the last one run did not) and if I right click on the file to run the scan on a file level it first reports it as infected, but when I run the scan it is clean.
My understanding is that S is the service partition -- could this be a false
positive?
I would like to get some background before I pursue with my AV vendor. Any help would be greatly appreciated!
12-08-2008 01:49 AM
Hello and welcome here!
Please tell us. which antivirus do you use?
Some suites have troubles, with our service partition and cause false positives.
_________________________________________________________
Follow @LenovoForums on Twitter! Try the forum search, before first posting: Forum Search Option
Please insert your type, model (not S/N) number and used OS in your posts.
I´m a volunteer here using Yoga 13, T510, X220t, T61.
TIP: If your computer runs satisfactorily now, it may not be necessary to update the system.
12-08-2008 04:35 AM
Hello, I've a similar problem. Avast antivirus 4.8 flagged "S:\INOV8LOG\RESETC.EXE" as "Other:Malware-gen".
12-08-2008 06:08 AM
I am running McAfee VirusScan Plus 2009
SL500 model 27463XU Intel(R) Core(TM)2 Duo CPU T5670 @ 1.8 Ghz running Vista Business SP1 Build 6001
Thanks
12-08-2008 11:23 AM
Hello,
I would do a check with Norton or Antivir.
I often heard about this issue, but it was never a virus, always the antivrus suites.
_________________________________________________________
Follow @LenovoForums on Twitter! Try the forum search, before first posting: Forum Search Option
Please insert your type, model (not S/N) number and used OS in your posts.
I´m a volunteer here using Yoga 13, T510, X220t, T61.
TIP: If your computer runs satisfactorily now, it may not be necessary to update the system.
12-08-2008 03:05 PM
A previous post about this basically went unanswered, take a look at what they found: http://forums.lenovo.com/lnv/board/message?board.i
I get the feeling that they're coming up because they overwrite system files, so they would fit the description of a Trojan, but that's not there purpose. Many virus are made by copying from legit programs like these, and the antivirus providers have to flag all possible threats, even the original programs.
As the user, you should add them to the trusted list, just incase you need to use one of them, cause if it gets blocked, it could leave you with a useless machine. I've had it happen before, I had to do a full reinstall, all original data lost. We had to get a whole new license to a pretty expensive program, and that was no fun, because I got most of the blame. ![]()