SAS False Positive?

BleepingComputer.com: SAS False Positive?

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

SAS False Positive? Superantispyware finds viruses not recognised by KIS or MBAM

#1 macBleepOrb

New Member

Group: Members
Posts: 3
Joined: 26-September 09

Posted 18 May 2011 - 09:19 AM

Hi,
I scanned an infected computer with MBAM MSE and Kaspersky. All found trojans and removed them.
Then ran scan with Superantispyware and it found new trojans:

Trojan.Agent/Gen-IExplorer[Fake](2 items)
Trojen.Agent/Gen-PEC (2 items)

I then scanned the folders where the files were kept with Kaspersky and MBAM and they came up clear.
Are these real trojans or are they false positives?

Thanks!

#2 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,516
Joined: 09-July 05
Gender:Male
Location:Virginia, USA

Posted 19 May 2011 - 10:17 PM

Anytime you suspect a file detection may be a false positive, get a second opinion by submitting it to one of the following online services that analyzes suspicious files:

In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.

You can submit the file(s) directly to SUPERAntispyware downloading and using the SUPERSampleSubmit Utility. The direct download link for this utility can also be found here.

Alternatively you can report the results at the False Positives Forum but they will probably ask you to submit a sample.

Once a file is received, a technician can examine it in more detail and provide a report letting you know the results.

Microsoft MVP - Consumer Security 2007-2012