Author Topic: Possible trojan, possible false positive?  (Read 15261 times)

0 Members and 1 Guest are viewing this topic.

creyl

  • Guest
Re: Possible trojan, possible false positive?
« Reply #15 on: September 24, 2011, 09:44:43 PM »
Quote
C:\Windows\SysWOW64\kernel32.dll|>[Emul]
The emul at the end means emulation so you are probably running a memory scan
I was running a normal full scan when I got this (same as the thread starter):
C:\Windows\SysWOW64\kernel32.dll|>[Emul]
C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16850_none_efce4eb86fe8ae92(Other numbers/letter here though)\kernel32.dll|>[Emul]
C:\Windows\SysWOW64\kernel32.dll|>[Emul]

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible trojan, possible false positive?
« Reply #16 on: September 24, 2011, 09:46:58 PM »
Could you upload them to Avast as false positives please

creyl

  • Guest
Re: Possible trojan, possible false positive?
« Reply #17 on: September 25, 2011, 02:31:21 PM »
Could you upload them to Avast as false positives please
Avast does not pick it up as virus anymore. So there's nothing I need to do now I guess?

Malekal_morte

  • Guest
Re: Possible trojan, possible false positive?
« Reply #18 on: September 27, 2011, 12:04:01 PM »
Avast! is killed computers since this WE.
Many people get this FP (Cycbot-KI) and send kernel32.dll to the quarantine and so Windows going bad.

=> http://translate.google.fr/translate?u=http%3A%2F%2Fforum.avast.com%2Findex.php%3Ftopic%3D85505.0&sl=fr&tl=en&hl=&ie=UTF-8

but im not able to reproduce it :(

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Possible trojan, possible false positive?
« Reply #19 on: September 27, 2011, 01:56:35 PM »
Running sfc /scannow will resolve this problem