AVG detected knlwrap.exe as infected
Results 1 to 9 of 9

Thread: AVG detected knlwrap.exe as infected

Threaded View

  1. #1
    Join Date
    Apr 2004
    Posts
    683

    AVG detected knlwrap.exe as infected

    I ran a scan with AVG a little while ago and saw in the results that knlwrap.exe was infected. I decided to check my dad's computer to see if he also has this file on his computer. He does and as soon as I hovered the mouse pointer over it, his AVG flagged the file as well. Since the original file on my computer had already been deleted, I checked the creation date on his. It looks like it was created a few days after he installed Windows. I saw that it is related to the InstallShield(which makes sense, considering the folder it is/was in). Others also mention it after installing Roxio 5. I have Roxio 5 on my computer now and my dad had it on his at one point. So this leads me to think its a false positive since its just now flagging the file on my computer as well as his. I uploaded the file to Jotti. Here are the results:

    AntiVir Found nothing
    ArcaVir Found nothing
    Avast Found nothing
    AVG Antivirus Found Dropper.Agent.JOC
    BitDefender Found nothing
    ClamAV Found nothing
    CPsecure Found nothing
    Dr.Web Found nothing
    F-Prot Antivirus Found nothing
    F-Secure Anti-Virus Found nothing
    Fortinet Found nothing
    Ikarus Found nothing
    Kaspersky Anti-Virus Found nothing
    NOD32 Found nothing
    Norman Virus Control Found nothing
    Panda Antivirus Found nothing
    Sophos Antivirus Found nothing
    VirusBuster Found nothing
    VBA32 Found nothing

    MD5: 48befc3e2b36de65a415977b1288c0d7

    AVG is the only scanner to flag this file, so I'm fairly sure it is a false positive. Though, some searches online do say that there is malware out there with the same filename. So to be sure, I want to send the file to AVG to analyze. Fink, I hope you see this thread. A short time ago, I had another false positive and you offered to password the .zip for me. Would you mind doing it again? I attached the .zip to my post.

    FYI, the file location is: C:\Program Files\Common Files\Install Shield\engine\6\Intel32
    Attached Files Attached Files
    Last edited by Syzich; August 22nd, 2008 at 11:35 AM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •