Trojan.Agent/Gen-Koobface[Bonkers] False Positive?

[thebigeast]

I scanned and received the threats below:

Trojan.Agent/Gen-Koobface[bonkers]

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\DATA\SETTINGS.EXE

C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\CPUID\PC WIZARD 2009\PC WIZARD 2009 SETTINGS.LNK

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\DATA\PCWPDF.DLL

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\PCWIZVDO.DLL

Are these false positives? I have had this program on my computer for quite some time and have never received any warnings from any of my anti-spyware and antivirus products including Super until tonight. Please let me know. Thanks!

[pip]

I scanned and received the threats below:

Trojan.Agent/Gen-Koobface[bonkers]

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\DATA\SETTINGS.EXE

C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\CPUID\PC WIZARD 2009\PC WIZARD 2009 SETTINGS.LNK

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\DATA\PCWPDF.DLL

C:\PROGRAM FILES\CPUID\PC WIZARD 2009\PCWIZVDO.DLL

Are these false positives? I have had this program on my computer for quite some time and have never received any warnings from any of my anti-spyware and antivirus products including Super until tonight. Please let me know. Thanks!

Same here, as of (UK)10/04/2010 ... PC Wizard(s) 2008 - 2009.

Also been using both Wiz's without problems.

No warnings from other protection progs'

Cheers,

pip

[hayc59]

I am getting the same thing as of today

my guess is a false positive since I am

very aware cablenuts is legit!!

see image**

http://www.broadbandnuts.com/

[SUPERAntiSpy]

I am getting the same thing as of today

my guess is a false positive since I am

very aware cablenuts is legit!!

see image**

http://www.broadbandnuts.com/

Did you do a false postive report from within the product? If not, restore the file, then scan again and do one so we can get the file and data.

[hayc59]

will do and thanks

[hayc59]

you should have it now and thanks Nick!!

Gordon

[hayc59]

Scan again folks it has been fixed for me

no false positives at all

Nick thank you for the fast response!!

thats why SAS is number one!!

[pip]

14/04/2010 SAS updated - Rescanned - All clear.

PC Wizard vers. 2008 - 2009 - 2010 All a'ok.

Cheers,

Pip (I hope that was a wink... Not a strain !)

[SherryTexasNative]

I wonder why no one ever came back here and posted this link to a page from SAS's own malware files!

https://www.superantispyware.com/malwarefiles/650709.EXE.html

a

I came across this trojan on my nephew's laptop today, when I went to do a quick cleanup on it. After looking up several threads from different sites I trust (Tom's Hardware being one of them) I see that most of the infected computers had that trojan with some others. And some of them report that their machines keep getting reinfected after cleaning. So either they're not really cleaning it in the first place, or they're reinfecting themselves by visiting the same site, or opening the same infected file they got it from (picture, song, game, screensaver prog, etc).