Forum Home
Press F1
 
Thread ID: 109605 2010-05-15 03:56:00 Is this a false positive rebels181 (14841) Press F1
Post ID Timestamp Content User
884993 2010-05-15 03:56:00 I've finished a scan with Spyware Terminator. It says it found the following infections

Registry HKLM\ ...\Microsoft\Windows NT\CurrentVersion\Image File Execution Option\egui.exe
Registry HKLM\ ...\Microsoft\Windows NT\CurrentVersion\Image File Execution Option\ekrn.exe

A quick Google search found these results Win32/Agent.PCU (www.eset.eu er_x_trojan_killav#E5_A) and False Positive (forums.iobit.com)

Is this something I need to worry about?
rebels181 (14841)
884994 2010-05-15 03:59:00 Those belong to NOD32 dont they? Speedy Gonzales (78)
884995 2010-05-15 04:17:00 Those belong to NOD32 dont they?

Yes they do. I've had Nod32 installed for 5 months now and spyware terminator for 7 months it's only now that spyware has found these "infections".

I also scanned with Nod32 that came up clean. Malwarebytes is doing a scan now.
rebels181 (14841)
884996 2010-05-15 04:31:00 Spyware terminator has it wrong - they are Nod32 files.

You have to tell Spyware Terminator to ignore them in future scans.
I had that happen a couple of months ago.
wainuitech (129)
884997 2010-05-15 21:28:00 False positives are quite common. I get them with various old files on my PC quite regularly with different scanners. NOD itself does it too.

As Wainuitech says, tell it to ignore them. They usually go away after a definition update or two.
pctek (84)
884998 2010-05-16 00:18:00 Thanks everyone. Just needed to check, have added to ignore list. rebels181 (14841)
1