Resolved Question

trojan sheur4.aci--how to remove

I upgraded to free 2013, and on the first scan it found this virus. It made two notations on it in the results area.

It identified one as a process that was deleted, but the other notation for the same virus was identified as a file. The red "X" stays on for that file in the virus identification area, meaning I presume it's not been corrected. It is identified as being in the real player/update folder, but can't be seen there on windows explorer.

System is win 7 home pro

I scanned it shortly before this with avg free 2012, and the virus was not identified on that or previous regular scans.

How would I remove this file, (or has it already been removed and I'm not understanding what I see in the results box of 2013.)

Thanks for any help

Discussion is locked
lakerb has chosen the best answer to their question. View answer
Follow
Reply to: trojan sheur4.aci--how to remove
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: trojan sheur4.aci--how to remove
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments

Best Answer

- Collapse -
RE: trojan sheur4.aci--how to remove

Hi lakerb,

Please accept our apology for delayed response.

In order to investigate this situation further, we need more details. Please provide us with a screenshot of the detected threats, if the issue persists.

Thank you.

- Collapse -
Answer
issue resolved... ? related to realplayer update.exe

Thanks AVG

I stopped the updater process of realplayer (in which folder the file was identified) on the startup menu, and then after restarting, when running AVG 2013 again the 'infected file' was not found.

I haven't gone back and restarted the realplayer updater... I don't use it anyway.

This may have been a false positive related somehow to the realplayer updater.exe, but don't know for certain...

- Collapse -
RE: issue resolved... ? related to realplayer update.exe

Hi lakerb,

This indeed could be a false positive alarm. Could you please provide us with the detected updater exe file as described here if you will be able to induce the detection again? Our virus analysts will reply to your message with results. Of course, should the file prove to be falsely detected it will be removed from detection signatures as soon as possible.

Based on your description, it seems that the file was already removed from virus signatures, but I can't tell for sure without knowing exact name of the detection (i.e. I'm unable to confirm that Trojan Horse Sheur4.ACI is an already removed false alarm).

Thank you for your cooperation.

CNET Forums