AVG and Trojan Horse Dropper Agent JOC

[HeatherD]

AVG has found some of these on my computer and put them in the virus vault. Searching the net, it seems it may be a false positive.......whatever that means. Has anyone else had this?

[MTA]

AVG has found some of these on my computer and put them in the virus vault. Searching the net, it seems it may be a false positive.......whatever that means. Has anyone else had this?

Hiya Heather,

Searched around and came up with this;

Hi everyone.

From the number of responses since just yesterday 8/22/08 when I first posted here, it is clear that AVG is picking up this suspected Trojan horse Dropper.Agent.JOC on a number of systems.

Many of you are asking what to do, and whether you are safe, so I have re-tested my system with AVG.

Rod, one of the specialist Virus and Spyware Moderators here, told us that AVG has issued a new virus definitions update. Before fetching this update I used AVG to restore this knlwrap.exe back to its proper location from the Virus Vault, and have deleted the virus vault entry.

I then re-scanned, (custom scan of the folder), where that file was and AVG again reported the file as a threat.

Then I downloaded the virus definition update through AVG, and re-scanned the same folder. No Threats Were Found.

So, as far as I am concerned, this was a False Positive, an error by AVG caused by one of their updates last week.

I am quite happy to leave this file where it is, and where it belongs now.

Thanks to Rod and Marianna for all your help.

For all you others who have questioned this as I did, open AVG's main Control Center so you can enter the Virus Vault. Find the file, right click it, and select "Restore this file". AVG will restore it to where it was taken from. Then delete the entry from the Virus Vault. Ignore any warnings that this file is a threat.

Then download AVG's latest update for your version, and re-scan your system if you wish, just to confirm there is no threat.

For those of you who say AVG deleted the file, then if it did, Don't Panic! The file is not critical to your system working properly. It may be the case that some of you may find a particular application that won't work later on, but this may only become apparent as and when you try and use it. If that does happen, the best way to resolve it is to uninstall the software, reboot the computer, then re-install the software.

I hope that helps, and thanks to all of you for your reports. Good work,

Check the full Q & A in this forum.

Seems you should keep it quarantined until you get shot of it.

[HeatherD]

Thank you for the link.
It seems that lots of people have had this problem too. I'll leave the files in the virus vault for a while .

[rivington]

Yes AVG has found a number of "False Positves" on my computer recently. Usually after a download from AVG. In my case I have searched my system and found they are associated with old progs that I have not used for some time but forgotten to remove for my system. Once removed prog and deleted Trogan from virus vault, everything OK.