Salta al contenuto principale

MalwareGen[Trj] found in icudt38l.dat of Acronis True Image 2010 & 2012

Thread needs solution

My internet security software (Avast) identified some MalwareGen trojan within Acronis True Image 2012, namely icudt38l.dat file used by the monitoring software of Acronis TrueImage.

In case it was already there on my machine and not an issue with the Acronis Software, I downloaded both 2010 and 2012 versions from my Acronis account and started to install 2012 first; Avast on this seperate machine, found the very same piece of Malware.

I uninstalled 2012, rebooted and began installing 2010, and the exact same problem file was identified.

Is Acronis aware of this problem? Are they pushing Malware? I noticed Acronis use McAfee Internet Security. From my experience as an IT consultant, McAfee should never be used on its own and other anti-Malware/spyware programs should be used as well, i.e Spybot S&D and Malwarebytes.

I no longer use McAfee as I find it ineffectual.

I just thought Acronis should know.

0 Users found this helpful

Jason,

Please see this post. http://forum.acronis.com/forum/36449
I would suggest to you that you also use more than one piece of anti-malware software to determine if this is a false positive.
Have you reported this finding to Avast for verification?
I've used every version of 2009, 2010, 2011, 2012,and 2013, and this has never been flagged by any of the anti-virus software that I have tested with.

James

Where is it located? On my installation of 2012 +plus pack , 7119, there is no such file (except the one in vmware tools folder, apparently unrelated to Acronis)

Just for reference, we had the same virus warning yesterday with the same file. Sadly I wasn't in the building and was unable to access the PC to see if the warning was a false positive and now it's been deleted by Avast.

Currently downloading the updated version of the Home software, which I hope will replace the deleted files and I will see if Avast pulls this up as a virus when installed.

It is located in a compressed .dll file. see this screen shot for location: http://forum.acronis.com/system/files/forum/2012/10/36449/acronis_malwa…
(This is not from my system)

I have tested this file with four other anti-virus programs (other than Avast), and none pick this file up as being infected on my system.

After installing 2012 update 2 and scanning the universal_restore.dll, Avast no longer appears to have any issues with icudt38l.dat on our system.

Is it possible Avast updated the virus definitions to correct a false positive?