nlite w2k with sfc.dll infected

[tech_girl]

While nlite is making an iso file, my Avast antivirus sounded with a warning about my sfc.dll been infected by "Win32:Trojan-gen". I have been using the same CD to do a full W2K install on my PIII laptop and have not encountered the above error before. Prior to that, I have scanned my laptop and it didnt turn up any virus warnings.

Has anyone encountered this? Thanks.

Edited July 16, 2008 by tech_girl

[Kurt_Aust]

From memory I had a similar false positive about a week or so ago when making an nLited W2K CD (I can't say for sure if it was sfc.dll though, my memory isn't that good).

[tech_girl]

Hi Kurt,

When you were nLiting the W2K, did you disable SFC? And what antivirus program are you using? And subsequently did your PC sound another warning when the scan is running? Thanks.

-TG

[Kurt_Aust]

Hi Kurt,

When you were nLiting the W2K, did you disable SFC? And what antivirus program are you using? And subsequently did your PC sound another warning when the scan is running? Thanks.

-TG

No, Avast, I think so but it was some time ago

[Th3_uN1Qu3]

If it's something with "gen" in the name on a file like that, it's probably a false positive. Upload the file to www.virustotal.com, you'll definitely get your answer there.

[tech_girl]

Thanks to both.

I have submitted the file to virustotal. Some of the virus programs returned trojan results and others didnt return anything. But i noticed Sophos returned a result of "disabled system file check dll". I guess its nothing to worry about...