IDNetters Forums

Technical News & Discussion => IDNet Help => Topic started by: krysia on Dec 15, 2008, 12:04:42

Title: is this malware or not?
Post by: krysia on Dec 15, 2008, 12:04:42
This morning I keep getting a message from AVAST that it's found a suspicious file, I think when I'm about to open Word files that have proved innocuous before:  it calls it C:\\WINDOWS\SYSTEM32\ils.dll.  It flashes up a box offering me the choice of deleting it, ignoring it (which it says is the recommended action), or submitting it to AVAST (though there doesn't seem to be any way of doing the latter).   I just updated AVAST this morning, so I'm thinking this is probably some kind of glitch rather than an actual danger, but if anyone else has come across it, I'd be reassured.  WindowsDefender hasn't found anything untoward in a quick scan, nor did the very thorough boot scan Avast ran when I restarted my computer.
Title: Re: is this malware or not?
Post by: Rik on Dec 15, 2008, 12:08:03
A Google showed Avast giving a false positive on ils.dll. Sadly, the forum concerned is down, so I couldn't dig any further.
Title: Re: is this malware or not?
Post by: krysia on Dec 15, 2008, 12:11:32
Thanks, Rik - that's very reassuring!  I'd tried googling myself without much success - thank goodness for IDNetters!  :)
Title: Re: is this malware or not?
Post by: Ray on Dec 15, 2008, 12:11:56
I've got it on my PC and my AV hasn't picked it up as a risk, it looks like it's a legitimate Windows file that is a component of the windows user location services.
Title: Re: is this malware or not?
Post by: Rik on Dec 15, 2008, 12:16:05
The Avast forum is back up, Krysia:

http://forum.avast.com/index.php?PHPSESSID=da225a1b8c43695aba0c6856f3c146b1&topic=40975.0
Title: Re: is this malware or not?
Post by: krysia on Dec 15, 2008, 12:41:38
Thank you both - it's clear now that it's a false positive!
Title: Re: is this malware or not?
Post by: Sebby on Dec 15, 2008, 13:22:21
:phew: