mogojohn Report post Posted December 14, 2009 Sorry, should have posted this as a new topic, as the files are different. Scan today with Sas Pro showed the following: Rogue.Agent/Gen-Nullo[DLL] C:\WINDOWS\SYSTEM32\BUGXJM42.DLL C:\WINDOWS\SYSTEM32\NT47AEX.DLL Both files were in my original Windows 7 install , so I think they are false positives. Malware Bytes & Microsoft Security Essentials don't list them as malware. Share this post Link to post Share on other sites
henkie3 Report post Posted December 14, 2009 I also had 2 of them in Vista HP SP2 32 bits NTIOFM4.DLL NTIBUN5.DLL Tested on virustotal.com, results are both 0/41 Share this post Link to post Share on other sites
wighty44 Report post Posted December 15, 2009 On 12/12/09 SAS Pro reported NTIEMBED.DLL as being Rogue.Agent/Gen-Nullo[DLL] as well as an EXE file being discussed in another FP topic - Dell, Win XP SP1. I updated SuperAntispyware to Core 4373, Trace 2214, restored the file, and then re-ran SAS. It corrected the FP for NTIEMBED.DLL so it may also correct other FPs being discussed here... Share this post Link to post Share on other sites
SUPERAntiSpy Report post Posted December 17, 2009 All of these should be resolved. Share this post Link to post Share on other sites
mogojohn Report post Posted December 17, 2009 I just ran another scan with 4.32.1000 Core 4384 Trace 2221 The same two files still picked up, I submitted a False Positive report from SAS Share this post Link to post Share on other sites
Catman51 Report post Posted December 25, 2009 I just got the Gen-Nullo. I will tell it to ignore. This is with the latest SAS Share this post Link to post Share on other sites
SUPERAntiSpy Report post Posted December 28, 2009 I just got the Gen-Nullo. I will tell it to ignore. This is with the latest SAS All of the known false positives have been resolved, if you have it, it may be a genuine threat. Share this post Link to post Share on other sites
oldpapa49 Report post Posted January 5, 2010 This file came up on my scan. msn9361.dll I have restored it so if you need this file. I will rename it with my intials if need be Wayne Share this post Link to post Share on other sites
Catman51 Report post Posted January 6, 2010 Got it again. Guess I will quarantine it this next time. Share this post Link to post Share on other sites
