I have two questions and looking through the forums I'm not finding the answer so I'm starting a new topic in the hopes someone can explain what is happening and the best course of action.
firstly. I ran a full system scan 2 days ago and found nothing, but out of curiosity I also immediately after ran a critical point scan. Following this second process I got a report similar to this one
Application Version : 5.0.1146
Core Rules Database Version : 8503
Trace Rules Database Version: 6315
Scan type : Critical Point Scan
Total Scan Time : 00:08:25
Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator
Memory items scanned : 692
Memory threats detected : 0
Registry items scanned : 29049
Registry threats detected : 1
File items scanned : 3645
File threats detected : 1
Trojan.Agent/Gen-Injector
[AzMixerSel] C:\PROGRAM FILES\REALTEK\INSTALLSHIELD\AZMIXERSEL.EXE
C:\PROGRAM FILES\REALTEK\INSTALLSHIELD\AZMIXERSEL.EXE
Basically it claims I have a trojan - trogan.agent/gen-injector to be specific.
I googled for the files it claims are infected "AZMIXERSEL.EXE" and all the information I have, regarding where in my computer this file was found, the configuration of my hardware, etc, that this file is most likely legit and not a trojan.
On the advice written in another conversation here, I removed the suspect file from the quarantine and attempted a second scan so that I might report it as a false positive. This is where my second problem occurred. The boxes to make the report were whited out, so my only options were to allow it or remove it again (which I did generating the attached report).
Full system scans are NOT reporting this file as suspicious ONLY critical point scans, which makes me more suspisious that this issue is a bug in the SUPERAntiSpyware programme itself.
As I cannot report this via the normal method, what advise can you give me as to how to proceed.
The file in question is an integral part of my REALTEX sound card and without it the audio could be compromised on my laptop, so I only want to permanently delete it if it is unquestionably suspect.
Having problems reporting a potential false positive - please advise.
Started by pittstop, Apr 26 2012 08:02 AM
gen-injector flase positive
No replies to this topic
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users










