Author Topic: SuperAntispyware.exe detected?  (Read 2711 times)

0 Members and 1 Guest are viewing this topic.

boing77

  • Guest
SuperAntispyware.exe detected?
« on: November 04, 2011, 09:40:03 PM »
Just did my weekly scan.

It gave a positive result:
Process 3736 [superantispyware.exe]. memory block 0x0000000004B50000, block size 10027008
Threat: Win32: Restarter-I (Trj)

Is this a false positive?  SAS has never been detected before.

Any advice?

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89330
  • No support PMs thanks
Re: SuperAntispyware.exe detected?
« Reply #1 on: November 04, 2011, 09:44:22 PM »
No it isn't a false positive:
Detections in Memory -
My guess is that you are doing a Custom scan in which you have elected to scan Memory and that all these detections are in memory or are listings of files that can't be scanned. Since they aren't physical files they can't be moved to the chest, deleted, etc. so there is no action that can be taken, hence the Apply button being greyed out.

The detections in memory are frequently other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don't be too surprised if it finds some in memory.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2297
Re: SuperAntispyware.exe detected?
« Reply #2 on: November 04, 2011, 09:44:51 PM »
Hello,
it looks that you scan memory and there is uncryted malware signature of other AV scanner (not a false positive).

Milos

boing77

  • Guest
Re: SuperAntispyware.exe detected?
« Reply #3 on: November 04, 2011, 09:47:29 PM »
No it isn't a false positive:
Detections in Memory -
My guess is that you are doing a Custom scan in which you have elected to scan Memory and that all these detections are in memory or are listings of files that can't be scanned. Since they aren't physical files they can't be moved to the chest, deleted, etc. so there is no action that can be taken, hence the Apply button being greyed out.

The detections in memory are frequently other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don't be too surprised if it finds some in memory.

Thank you.  The clarity (and speed) of your answer is exemplary. Thank you

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89330
  • No support PMs thanks
Re: SuperAntispyware.exe detected?
« Reply #4 on: November 04, 2011, 10:59:03 PM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security