[SLVD] False positive - Quick Heal Antivirus Showing Win32.trojan

Do you get the same problem without DriverPacks integrated? 
It's possible the host system is infected.
DriverPacks downloaded from this site are clean.

Read BEFORE you post.  HWID tool   DriverPacks Tutorial   DONATE!

Not all heroes wear capes, some wear Kevlar!

Ok let me try every thng

with driverpacks
with windows media player 11

and for the rest i can assure that there is no virus thing inside. Because i created some XP disks without driver packs using nLite integration drivers. at that time it was working perfectly. But, as we know we have a huge base of drivers in our driver packs i decided to go for it and i also think that there cant be any threat in our driverpacks but may be in the source/integrater of windows media player 11.

Ok will meet again here only

thanks for reply

Which file(s) does your AV show as infected?  I'll double-check on my system.

Read BEFORE you post.  HWID tool   DriverPacks Tutorial   DONATE!

Not all heroes wear capes, some wear Kevlar!

OK now i have tried all the things whichever is possible.

My quick heal stops at file C:\Windows\System32\zipfldr.dll during preinstall virus scan and gives me the message "Found some threates in your system. Proceeding with installation will not be safe as the installation copy will be infected. We recommand you to scan and clean your system with quick heal emergency disk."
'Win32.TrojanDownloader.Small.gen!V.8'

I am now 90% sure that there is some mistake with our driverpacks. I request you to check our driverpacks.

Last edited by Tarak Bhavsar (2009-10-06 17:04:14)

My AV brand is not free and it is as costly as Norton and better then NOD or Norton as i have tried NOD, Symantec and Quick Heal on atleast 1500 systems.

You can check my brand on

www.quickheal.co.in

and moreover my brand also comes under Microsoft WGA Program. So, i think there is no mistake in my search. This AV brand is working since 1993.

http://www.quickheal.co.in/mstone.asp

http://www.quickheal.co.in/awards.asp

Last edited by Tarak Bhavsar (2009-10-06 19:56:01)

I don't really care how good you think it is... or even how good they think it is...

If it is reporting false positives... then it is junk
How much of your time has been wasted, just on this issue?
What about our wasted time?
If someone wastes a few hours of IT time it will definately cost them more than what they thought that they had saved on the AV program. (even worse if they paid a premium price)   False positives cost time, lots of time, and time is money. 

Can you confirm the virus using another scanner of your choice?

Have you submitted the file to Quick Heal for evaluation?
did you check the hash on the file before and after your process to see if it actually is being changed?
were you able to reproduce the exact same result each time (IE more than once)
Are you runing any service packs as part of your setup that might update this file?

I assume you are doing on access scanning...
your source shows no virus,
DriverPacks shows no virus,
DriverPacks has to be the last step in your process before ISO creation..
So where does it come from?
(It is a magic teleporting virus that can add itself to WORM media )

(( You never answered my question:

Was the network card plugged in during the install?
(link light on, and conncted to a network... and possibly the internet
- I am going to bet the answer to that question is YES. Since it went unanswered)

that would explain different results each time... you are just getting a different virus from the net each time you install lol. if you give a machine internet access during an install you will have a virus before you get to the desktop. even local network access is risky

[are you installing from disc?]
If so just pull the network cable until you have your AV / Firewall in place .
Does the issue still exist?

))

We don't use Zip... and don't fool with ANY windows dll files.
txtsetup dosnet and setup... that is it, just those three.
we include our own un7zip app...

None of the team has heard of this AV...
collectively we service tens of thousands of machines. (daily)
DriverPacks is downlaoded at the rate of at least a million times a week.
this is the only report out of our tens of millons of users of this issue.
No one at all out of all those people also sees this issue... think about it...

the reviews you point to are all on their site... and not one of them is noteworthy...
Who cares if the  Mahratta Chamber of Commerce gave them an award???
(It is a small town with a specialty every one of the businesses is chocked full with MVPs CCIE's and other who saids)

I don't see a single reputable source, like Consumer Reports or PC magazine, in the list...

Google top AV programs / reviews
Check ANY independent list of top AV programs and topheal is not on their list.

So if they can't make a single top ten list, ever not once in 15 years... I think we can all agree it's junk.
And if you really paid as much as you would for Norton then you got taken to the cleaners.
I am sure they have no resources that even come close to compare to SARC.
Although I must admit i have been very disapointed with where Norton has gone since Peter left. I have stopped recomending all of their products for years now.

Either
1 resolve the issue with your process
2 resolve false positive with your prefered AV,  or get one that works...

Issue marked solved...

DP BartPE Tutorial   DP_BASE Tutorial   HWID's Tool     Read BEFORE you post    UserBars!

The DriverPacks, the DP_Base program, and Support Forum are FREE!.

Mr.tarak Bhavsar

Here I Am Jigar Prajapati From India.

Brother OverFlow Brother Is Right I Got Also This Problem With My Untended Xp CD. I Am Also Big Fan Of This DP Community. And I Trust On It.
There Is Just Quick Heal False Report.
This Problem Accured Also With Me I Try Kaspersky KIS 2007 to 2010 No Virus Found And Bro One Big Joke It This When I Install Quick Heal On My Untended Xp Its Show Me Virus In This All Files zipfldr.dll , yv12vfw.dll , xvidvfw.dll , xvidcore.dll ,xpssvcs.dll , xpsshhdr.dll , And Also Big Joke Its Says This xpsp3res.dll ,xpsp2res.dll , xpsp1res.dll , xpob2res.dll , xolehlp.dll , xmlprovi.dll , xmlprov.dll And xcopy  File Are VIrus InFeCtEd lol Its All SP3 OS System Files ). And If U Dont Trust On Me Then Follow This Instruction Just Excuted Install Of Ur Quick Heal And When Its Says File Name That Is Infected Then Just Close And Go to System32 Folder Find That File And Cut Past It On Anywhere In Ur Pc For Backup Perpose And Then Start Setup Again Then Its Says One Of Other Files Are Infected U Do Again Cut Past And Do It This Process One Bye On Its Give U More Then 30 File Name That Are Infected lol .............. And If U wanna Know Quick Heal Right Or Wrong Then Just Copy All File That Quick Heal SAys That Is Infected And Go To Other Quick Heal Installed System That HAve LAtest Update And Scan All Files  There Is Nothing . ) I Try It Everything Myself ) Its Just False Report Installation Time Its Show Virus And Installed And Up To DAte Antivirus Says Its Clean ) hahaha good joke By Quick HEal . Go And Take Kaspersky 2010 Or McFee ITs Wonderfull Antivirus. And Dont Blam On Driverpacks.net.......... Thanx
And Thanx To Brother Overflow For Detailed Responce.
Also Sorry For My Bad English.