AVAST tells me that setup.exe is infected with IDP.Generic. Solved

Question

Hello, I quarantined it, but I wonder if it's a mistake by Avast? Can someone tell me if the setup is infected or not? My PC has been restored to factory settings. Thank you for your response Cloclo

MisteryBean · Accepted Answer

It's a false positive.  Without knowing which file we're talking about ???, you're too good !!!  -- Security contributor.

MisteryBean · Answer

Hello,  In which folder was this setup.exe located?  Restore it from Avast and scan it on virustotal => Click on file then choose file and look for setup.exe  -- Security contributor.

cloclo777 · Answer

Hello,  Bkav  W32.malware.sig1 Jiangmin  Trojan.Shelma.ffm Dr.Web vxCube  MALWARE Yomi Hunter  MALWARE  I can't find which folder, I just found this to send you. Also, I don't know English. Thanks for your help 2 engines detected this file d17db3b354e63d42cd42ef774fa92906e0447df336c7c767e92ffa905c5c11f6 avast_premium_security_setup_online.exeCOMMUNITY Basic Properties MD5 2db1352b4a1542a2bc4e86ec7391ef2e SHA-1 d6ced1cc866dd5819469cf4d249fd4cef6c333bf SHA-256 d17db3b354e63d42cd42ef774fa92906e0447df336c7c767e92ffa905c5c11f6 Vhash 025066655d1d151560d011z1030071mz16fz Authentihash 02ba617b937ae91911eb8342f32149effc735547b3cd136362fc6a80605a4359 Imphash ca198f963df989f99cb5f4610b3fe80f Rich PE header hash dc2d3ddec95e9c12a5a673075fd49de1 SSDEEP 6144: gswVuihbVDPDtkOIY7l5UqeKy2foP1HAW0mLO0Af: glVuqxDPDtkOIMl5UYfc50mK0c TLSH T16A345B202D828072E8730530A5FCAA75592DBFB10B3185EF67B4BE6D3F296D25534B27 File type Win32 EXE Magic PE32 Executable for MS Windows (GUI) Intel 80386 32 bits Windows Control Panel item (generic) (88.2%) TRiD Win16 NE Executable (generic) (3.1%) TRiD Win32 Dynamic Link Library (generic) (2.9%) TRiD Win32 Executable (generic) (2%) TRiD OS/2 Executable (generic) (0.9%) File size 227.62 KB (233080 bytes) The history Creation time 2019-08-19 09:24:52 Signature date 2019-08-19 09:28:00 First seen in the wild 2019-08-29 10:06:24 First submission 2019-08-19 19:49:15 Last submission 2020-06-27 00:55:09 Last analysis 2020-12-05 20:19:36 Names avast_premium_security_setup_online.exe  ._cache_avast_premium_security_setup_online.exe  microstub  microstub.exe  avast-premium-security-20-1-2397.exe  avast_premium_security_setup_online (2) .exe  qmsli66w5.dll  avast_premium_security_setup_online (1) .exe  ._cache_ <SAMPLE.EXE>  ._cache_% SAMPLENAME% Signature Information Signature Verification  Signed file, valid signature File Version Information Copyright (c) 2019 AVAST Software Product Avast MicroInstaller Description Avast Antivirus Installer Original name microstub.exe Internal name microstub File version 2.1.1288.0 Signature date 09:28 19/08/2019 Signers AVAST Software sro High Assurance Code Signature DigiCert CA-1 DigiCert Counter-Signers DigiCert Timestamp Responder DigiCert Assured ID CA-1 DigiCert Signers X509 AVAST Software sro DigiCert High Assurance EV Root CA DigiCert Timestamp Responder High Assurance Code Signing DigiCert CA-1 DigiCert Assured ID CA-1 AVAST Software s.r.o. DigiCert SHA2 Assured ID Code Signing CA DigiCert Assured ID Root CA DigiCert SHA2 Timestamp Responder DigiCert SHA2 Assured ID Timestamping CA Portable Executable Information Compiler Products id: 259, version: 25711 count = 11 id: 261, version: 25711 count = 147 id: 260, version: 25711 count = 18 id: 260, version: 26706 count = 17 id: 259, version: 26706 count = 21 id: 261, version: 26706 count = 48 [IMP] VS2008 SP1 build 30729 count = 13 [---] Unmarked objects count = 177 id: 265, version: 27027 count = 15 id: 255, version: 27027 count = 1 Header Target machine Intel 386 or later compatible processors Compilation timestamp 2019-08-19 09:24:52 Entry point 4304 Sections contained 6 Sections Name Virtual address Virtual size Raw size Entropy MD5 Chi2 .text 4096 134330 134656 6.57 78b4668fd0b15df92aa3f554a08f4585 793488.63 .rdata 139264 38716 38912 5.35 9ad121bfeb5236ed7b121abee676d192 1463169.75 .data 180224 5500 2560 2.8 9b8044c202d7e567f022831698c1f322 305727.66 .didat 188416 52 512 0.52 0c9dd1691384311f75bcdb6f00081405 114335 .rsrc 192512 26360 26624 3.93 7727ec2aa2ef35064dbf0a25f376cba3 1639840.25 Imports

MisteryBean · Answer

RE_  Where did you get what you posted???  -- Security contributor.

cloclo777 · Answer

Hello, I myself don't know anymore, I had to be absent for 2 days. I restored from Avast and did a thorough scan and now it doesn't find anything. I have the paid version of Avast and paid Avast Cleanup. I wanted to scan with MalwareBytes but my free version has expired. What free options do you recommend, preferably in French? As for Virus Total, I don't have a setup.exe, there is just a setup without .exe which redirects me to state when I click on setup and detects nothing abnormal, everything is green. Is it normal not to have a setup.exe? I thank you for your help. I don't know what to do now. Thank you very much Cloclo

MisteryBean · Answer

RE_  I restored from Avast and did a thorough scan and it doesn't find anything anymore. I have paid Avast and paid Avast Cleanup.  For your information, if you have Windows 10, both are unnecessary because you have Windows Defender, and Cleanup is useless just like all optimizers like CCleaner or Glary.  I wanted to do a scan with Malwarebytes but my free version has expired.  The resident protection is paid, you can continue to perform scans by updating it beforehand.  For VirusTotal I don't have a setup.exe, there's just a setup without .exe that redirects me to state when I click on setup and detects nothing abnormal everything is green. Is it normal not to have setup.exe?  Since I don't know where this setup.exe comes from (which is the recurring name for most installation exes), I can't answer you. I would need to know which folder it is located in.  -- Security contributor.

MPMP10 · Answer

Good evening, This is a false positive. https://forum.malekal.com/viewtopic.php?t=63555  https://translate.google.com/translate?hl=fr&sl=en&u=https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fwindows%2Fforum%2Fall%2Fwhy-avast-is-giving-idpgeneric-error-on-my-windows%2Fb8c59ee1-9bb5-4a19-adb1-e8869c4ce639&prev=search&pto=aue The enemy is stupid: he thinks we are the enemy while it is him! Pierre Desproges

cloclo777 · Answer

Hello, No, I have Windows 8.1, I'm going to try to find my setup.exe. Thank you very much, I suspected it was a false positive. I NEED TO FIND IT, but I'm forcing myself to understand. Normally, I should find it in the program file if I'm not mistaken, and there's nothing. How could Avast find this false positive? By the way, I had seen that the application c:\windows\system32\setupcl.exe cannot be run in 32-bit mode, could that be the cause???? I admit I'm a bit lost at the moment. Should I install it? Thanks to you. CLOCLO

AVAST tells me that setup.exe is infected with IDP.Generic.

8 réponses

Texture issues in enshrouded

Big fish games are they worth it?

Saracroche: the effective french app against phone spam

How to get the character µ on the android keyboard.

Access issue to my "contact me" profile

How to disable the sound "beep" on my keyboard?

What is your opinion on viagogo?

Is ioffer reliable in your opinion?

How to stop receiving messages from the number 3 86 91

Mango issue in sims 2 castaways ds