Jump to content


Photo

Rogue.Agent/Gen-Nullo[DLL]


  • Please log in to reply
8 replies to this topic

#1 mogojohn

mogojohn

    Advanced Member

  • Members
  • PipPipPip
  • 81 posts
  • LocationAustralia

Posted 14 December 2009 - 08:35 AM

Sorry, should have posted this as a new topic, as the files are different.

Scan today with Sas Pro showed the following:

Rogue.Agent/Gen-Nullo[DLL]
C:\WINDOWS\SYSTEM32\BUGXJM42.DLL
C:\WINDOWS\SYSTEM32\NT47AEX.DLL

Both files were in my original Windows 7 install , so I think they are false positives. Malware Bytes & Microsoft Security Essentials don't list them as malware.
Windows 7, Microsoft Security Essentials, SuperAntiSpyware Pro with Resident Protection.

#2 henkie3

henkie3

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 14 December 2009 - 06:36 PM

I also had 2 of them in Vista HP SP2 32 bits
NTIOFM4.DLL
NTIBUN5.DLL

Tested on virustotal.com, results are both 0/41

#3 wighty44

wighty44

    Newbie

  • Members
  • Pip
  • 8 posts

Posted 15 December 2009 - 03:01 PM

On 12/12/09 SAS Pro reported NTIEMBED.DLL as being Rogue.Agent/Gen-Nullo[DLL] as well as an EXE file being discussed in another FP topic - Dell, Win XP SP1.

I updated SuperAntispyware to Core 4373, Trace 2214, restored the file, and then re-ran SAS. It corrected the FP for NTIEMBED.DLL so it may also correct other FPs being discussed here...

#4 SUPERAntiSpy

SUPERAntiSpy

    Site Admin

  • Administrators
  • 3,809 posts
  • LocationEugene, OR

Posted 17 December 2009 - 05:10 AM

All of these should be resolved.

#5 mogojohn

mogojohn

    Advanced Member

  • Members
  • PipPipPip
  • 81 posts
  • LocationAustralia

Posted 17 December 2009 - 09:16 PM

I just ran another scan with 4.32.1000 Core 4384 Trace 2221

The same two files still picked up, I submitted a False Positive report from SAS
Windows 7, Microsoft Security Essentials, SuperAntiSpyware Pro with Resident Protection.

#6 Catman51

Catman51

    Member

  • Members
  • PipPip
  • 26 posts
  • LocationL.A., CA

Posted 25 December 2009 - 08:15 PM

I just got the Gen-Nullo. I will tell it to ignore. This is with the latest SAS
SteveM

#7 SUPERAntiSpy

SUPERAntiSpy

    Site Admin

  • Administrators
  • 3,809 posts
  • LocationEugene, OR

Posted 28 December 2009 - 04:35 PM

I just got the Gen-Nullo. I will tell it to ignore. This is with the latest SAS


All of the known false positives have been resolved, if you have it, it may be a genuine threat.

#8 oldpapa49

oldpapa49

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 05 January 2010 - 03:20 PM

This file came up on my scan.

msn9361.dll
I have restored it so if you need this file. I will rename it with my intials if need be
Wayne

#9 Catman51

Catman51

    Member

  • Members
  • PipPip
  • 26 posts
  • LocationL.A., CA

Posted 06 January 2010 - 01:04 AM

Got it again. Guess I will quarantine it this next time.
SteveM




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users