So, long story short, I just recently received a new I2 under warranty after my old one suddenly died. This new one updated fine the first day that I got it, and I loaded a tune onto my truck, which is still on there right now.
But now (about a week after the initial update), I went to check for any new updates (because I want to load a different tune onto the truck), and suddenly my virus scanner freaks-out and makes my Updater inaccessible. As far as I can tell, there's no way around this without un-installing my Avast virus scanner.
What has changed? Is there actually mal-ware on here? What do I do???
Thanks.
Is my Updater infected with Malware???
Moderator: sohfast94
-
retiredtechnician
- Posts: 24
- Joined: Wed Oct 07, 2015 4:46 pm
Re: Is my Updater infected with Malware???
I had the same problem with Avast condemning the "InTuneUpdater2.exe" file. In fact, Avast removed it from the tool. Luckily, I had backed up the I2 right after I got it a few months ago, so I just copied that file back to the unit.
I checked that file with 5 different anti-virus and anti-malware programs, Avast being the only one that detected it as infected; so it appears Avast gives a false-positive on that file.
If you insist on using Avast, you have at least a couple options (assuming you're using Windows):
1. Click on the Avast icon in the Sys tray, go to Settings>Active Protection>File System Shield (Customize)>Actions and set all three options to "Ask" so Avast won't delete the file. Then go to Settings>General>Exclusions and enter that file as an exclusion.
2. Or you can right-click on the Avast icon in the Sys tray, go to Avast Shields Control' and disable Avast for the amount of time you'll need to update the unit.
Hope this will help you.
I checked that file with 5 different anti-virus and anti-malware programs, Avast being the only one that detected it as infected; so it appears Avast gives a false-positive on that file.
If you insist on using Avast, you have at least a couple options (assuming you're using Windows):
1. Click on the Avast icon in the Sys tray, go to Settings>Active Protection>File System Shield (Customize)>Actions and set all three options to "Ask" so Avast won't delete the file. Then go to Settings>General>Exclusions and enter that file as an exclusion.
2. Or you can right-click on the Avast icon in the Sys tray, go to Avast Shields Control' and disable Avast for the amount of time you'll need to update the unit.
Hope this will help you.
Re: Is my Updater infected with Malware???
Thanks for the help. I was assuming that it was an anti-virus error (hopefully the Updater isn't actually infected with a virus), but I didn't know how to get around it. Thanks!retiredtechnician wrote:I had the same problem with Avast condemning the "InTuneUpdater2.exe" file. In fact, Avast removed it from the tool. Luckily, I had backed up the I2 right after I got it a few months ago, so I just copied that file back to the unit.
I checked that file with 5 different anti-virus and anti-malware programs, Avast being the only one that detected it as infected; so it appears Avast gives a false-positive on that file.
If you insist on using Avast, you have at least a couple options (assuming you're using Windows):
1. Click on the Avast icon in the Sys tray, go to Settings>Active Protection>File System Shield (Customize)>Actions and set all three options to "Ask" so Avast won't delete the file. Then go to Settings>General>Exclusions and enter that file as an exclusion.
2. Or you can right-click on the Avast icon in the Sys tray, go to Avast Shields Control' and disable Avast for the amount of time you'll need to update the unit.
Hope this will help you.
EDIT: What about this thread that sounds similar, and the poster is using Symantec?:
https://forum.diablosport.com/viewtopic ... 60&t=57834
Thanks!
-
retiredtechnician
- Posts: 24
- Joined: Wed Oct 07, 2015 4:46 pm
Re: Is my Updater infected with Malware???
I don't know which version they were using, but my Norton found nothing when scanning the "InTuneUpdater2.exe" file. Here are the tools I tried and the results. All were latest versions updated to the latest definitions:
Avast (full version) ... Shows infected - (Win32:Malware-gen).
Norton (full version) ... no threats.
McAfee (full version) ... no threats.
ClamWin Portable ... no threats.
McAfee Stinger Portable ... no threats.
SpyBot Portable ... no threats.
I'm not saying it's not infected, I'm just saying these are my results. I realize there are other anti-virus/anti-malware programs, including AVG, Avira, and MalwareBytes, that can also be checked; but I've spent enough time testing this file. If you check these programs, please let me know the results.
Maybe Mike will comment on the file's status????
RT
Avast (full version) ... Shows infected - (Win32:Malware-gen).
Norton (full version) ... no threats.
McAfee (full version) ... no threats.
ClamWin Portable ... no threats.
McAfee Stinger Portable ... no threats.
SpyBot Portable ... no threats.
I'm not saying it's not infected, I'm just saying these are my results. I realize there are other anti-virus/anti-malware programs, including AVG, Avira, and MalwareBytes, that can also be checked; but I've spent enough time testing this file. If you check these programs, please let me know the results.
Maybe Mike will comment on the file's status????
RT