Corrupted C:\Program Files\Shield\reboot.exe

[GlennB]

This morning I upgraded my AVG Antivirus from AVG9 to AVG2011 and did an initial scan.
The only thing found was "corrupted reboot.exe". AVG9 has never shown this so I'm not sure if it ia false positive with AVG2011 of if something has happed to RollBack RX.
As far as I can tell RollBack is functioning OK but I am puzzled.
Any suggestions?. I don't really want to reinstall RollBack.

[HDS-Jacob]

Hello GlennB,

Let's see if others using AVG have any feedback. In any case, feel free to contact support at http://support.horizondatasys.com

Best,
Jacob

[thekochs]

I also just upgraded from AVG FREE 9.x to AVG FREE 2011 10.x and got this warning on the AVG SCAN. I have many PCs with RollBack RX and AVG FREE with daily scans and never had a previos issue on this executable. I posted on AVG Forum and sent e:mail to their support on False Positive....but since I'm using AVG FREE this is limits to how much they'll do or care.
AVG Thread
Free Antivirus | Forum - False ? (Corrupt => "C:\Program Files (x86)\Shield\reboot.exe") (RollBack RX)

I also submitted a ticket to Horizon Support: 4073-8326418

I assume this may be a big issue for Horizon for RollBack RX since I'm guessing this .EXE is import to your software running OK ?
I manually restored out of AVG Quarantine but can't do this daily after scans forever.

Please let me know your thoughts....I'm guessing since AVG 2011 is new that you'll start to get alot of posts on this issue.

[HDS-Jacob]

Hi thekochs,

Thanks for the feedback and welcome to the Horizon DataSys forum. Let's see if we can get further insight into the issue.

Best,
Jacob

[thekochs]

Thx....I've been along time user/buyer (many-many licenses) of RollBack RX but never used the Forums....tickets always seemed to be so responsive.

Take a look at the AVG thread....they are starting to address.
Free Antivirus | Forum - False ? (Corrupt => "C:\Program Files (x86)\Shield\reboot.exe") (RollBack RX)

In the short term I'm trying to figure out how to have AVG ignore this file in the scan instead of manually having to restore each time. Lopg term, I hope AVG puts update in the Virus Database to resolve. I assume this reboot.exe is a important file for RollBack RX to not be deleted ?

Regards.

[HDS-Jacob]

Thanks for providing that info thekochs. It looks like the AVG thread has been updated with a how-to on excluding files and it should not be deleted. Let us know if it is successful. I'll flag this for Nick as well.

Thanks,
Jacob

[thekochs]

Originally Posted by HDS-Jacob

Thanks for providing that info thekochs. It looks like the AVG thread has been updated with a how-to on excluding files and it should not be deleted. Let us know if it is successful. I'll flag this for Nick as well.

Thanks,
Jacob

I tried to EXCLUDE the reboot.exe file in the AVG advanced settings and it still flags as warning and puts in Virus Vault....which means I have to manually remove. I have flagged this in the AVG thread....FAQ seems straight forward to exclude a file but does not seem to work.

[thekochs]

AVG Virus team is looking at file.
Also, Horizon team sent me new reboot.exe file that seem to work...pass AVG. I have some open questions to them on v8.1, v9.1 and use for XP, W7, Vista O/S.

I will update soon.

[thekochs]

Attached is file in ZIP format that fixes problem with AVG 2011. The origional reboot.exe is not proper Windows EXE format...this one sent to me is. Delete the current/old/problem reboot.exe in the C:\Program Files\Shield directory and repalce with this unzipped reboot.exe version. Besides the fact AVG 2011 will not flag as warning you can prove to yourself this fiule works by first double-clicking on old file and you'll receive a Windows error.....double-lcik on the new and as name implies it will reboot machine. Make sure to take old reboot.exe off your system !!

************************************************** ******

This support ticket requires further information.

Comment(s): Hi, yes, you can replace reboot.exe on all O/S and v8.1 and v9.1. Thanks.

Ticket Information:
Ticket #: 4073-8326418
Date Created: 10/17/2010 10:31 AM CDT
Details: I just upgraded to AVG FREE 2011 and first scan shows Corrupted C:\Program Files\Shield\reboot.exe
This file is RollBack RX and I assume a false positive but clearly a problem for RollBack RX if AVG quarantines it on every scan. I have posted on AVG thread....there is also Horizon Forum thread on the subject too. Please let me know thoughts ?

AVG 2011 Thread
Free Antivirus | Forum - False ? (Corrupt => "C:\Program Files (x86)\Shield\reboot.exe") (RollBack RX)

Horizon Thread
Corrupted C:\Program Files\Shield\reboot.exe

[thekochs]

Wanted to post e:mail from AVG support team that "new AVG update fixes". I updated AVG from 10.0.1136 to 10.0.1114 (VDB 422/3212 to 422/3211) and still flags as bad file. Not sure what version they are referring to ?.....but I have asked.

As FYI, the previous posted file from Horizon Datasys eliminate error but would ideally like AVG to not flag....figure AVG would want as well so users WW don't have to patch the RollBack RX file. I'll let you know as AVG progresses on their side.

-----Original Message-----
From: AVG Technical Support
Sent: Friday, October 22, 2010 7:37 AM
Subject: Case AVG#0000931275: RE: RE: FALSE POSITIVE => "C:\Program Files (x86)\Shield\reboot.exe" (RollBack RX)


Dear Customer,

Thank you for your email.

Please be informed that the new version of AVG should not detect such files. In case the issue re-occur in the future, please send us a sample of the files for further investigation.

Thank you for your cooperation, it is appreciated.