SASPro Posted September 9, 2015 Hello all, Just started a full scan of my system (have done it before and nothing happened) and today it says that it detected a Trojan.Agent/Gen-MSIL in C:\PROGRAM FILES\WINRAR\ZIP.SFX. Just wondering if this is False Positive and if I should release/remove it from quarantine? Thanks! Regards, SASPro Share this post Link to post Share on other sites
SAS Malware Research Posted September 9, 2015 Hello SASPro, I believe this is a false detection. I have adjusted the definition database, and ZIP.SFX should no longer be detected as of database version 12052 (which will be released within the next few hours). Update to version 12052 and scan again (a restart of SAS may be necessary). Please let me know if this resolves your issue, or if you have any other questions or concerns, SAS Malware Research Share this post Link to post Share on other sites
SASPro Posted September 9, 2015 Hello sir, I have scanned the system and updated to a new definition (that happened on my 2nd scan) and it all turned normal but that is because the file is still under the quarantine. I will remove it from the quarantine and restart my PC and then do a full scan. Will report what happens. Thanks! Regards, SASPro Share this post Link to post Share on other sites
SAS Malware Research Posted September 9, 2015 FYI database version 12052 has not yet been released - check back in 3-4 hours and it should be ready. Share this post Link to post Share on other sites
