Jump to content
Sign in to follow this  
Youroldpalray

False AV

Recommended Posts

Had a bit of a battle with a Fake AV that kept shutting down my system before any scan got near it.

It didn't show up in a safe mode scan but luckily SAS picked up on it next time i ran my PC in normal mode.

Took a few goes mind.

Is that just normal behaviour for such files?

From the log:

Trojan.Agent/Gen-FakeAV

[dMoBhIjPgOm09001] C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DMOBHIJPGOM09001\DMOBHIJPGOM09001.EXE

C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DMOBHIJPGOM09001\DMOBHIJPGOM09001.EXE

C:\WINDOWS\Prefetch\DMOBHIJPGOM09001.EXE-2126B323.pf

Thank you.

Share this post


Link to post
Share on other sites

Had a bit of a battle with a Fake AV that kept shutting down my system before any scan got near it.

It didn't show up in a safe mode scan but luckily SAS picked up on it next time i ran my PC in normal mode.

Took a few goes mind.

Is that just normal behaviour for such files?

From the log:

Trojan.Agent/Gen-FakeAV

[dMoBhIjPgOm09001] C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DMOBHIJPGOM09001\DMOBHIJPGOM09001.EXE

C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\DMOBHIJPGOM09001\DMOBHIJPGOM09001.EXE

C:\WINDOWS\Prefetch\DMOBHIJPGOM09001.EXE-2126B323.pf

Thank you.

Let us know if you have any further questions.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×