Pautoenr.dll - False positive [SOLVED]

[agnostico]

Hi!

IObit Security 360 reported Pautoenr.dll as trojan.agent but this is a false positive. As matter of fact Pautoenr.ddl is part of SP3 for Windows XP as you can see here http://support.microsoft.com/?scid=kb%3Ben-us%3B907247&x=15&y=15.

I sent it to the ignore list.

 

IObit Security 360

 

OS:Windows XP

Version:1.4.0.11

Define Version:1321

Time Elapsed:00:01:39

Objects Scanned:47275

Threats Found:1

 

|Name|Type|Description|ID|

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\pautoenr.dll, 12-1046

 

IObit Security 360

 

OS:Windows XP

Version:1.4.0.11

Define Version:1321

Time Elapsed:00:05:22

Objects Scanned:56216

Threats Found:3

 

|Name|Type|Description|ID|

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\pautoenr.dll, 12-1046

Trojan.Agent - Quarantined, File, C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll, 12-1046

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\dllcache\pautoenr.dll, 12-1046

 

[/b]

[enoskype]

Hi agnostico,

 

You are right that pautoenr.dll is Auto Enrollment DLL and a native file of XP from MS.

 

Will you please upload all of yours to VirusTotal and give the analyses links in this thread.

 

Also, what is the versions and sizes of the files?

 

Cheers.

[hxin]

Hi!

IObit Security 360 reported Pautoenr.dll as trojan.agent but this is a false positive. As matter of fact Pautoenr.ddl is part of SP3 for Windows XP as you can see here http://support.microsoft.com/?scid=kb%3Ben-us%3B907247&x=15&y=15.

I sent it to the ignore list.

 

IObit Security 360

 

OS:Windows XP

Version:1.4.0.11

Define Version:1321

Time Elapsed:00:01:39

Objects Scanned:47275

Threats Found:1

 

|Name|Type|Description|ID|

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\pautoenr.dll, 12-1046

 

IObit Security 360

 

OS:Windows XP

Version:1.4.0.11

Define Version:1321

Time Elapsed:00:05:22

Objects Scanned:56216

Threats Found:3

 

|Name|Type|Description|ID|

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\pautoenr.dll, 12-1046

Trojan.Agent - Quarantined, File, C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll, 12-1046

Trojan.Agent - Quarantined, File, C:\WINDOWS\system32\dllcache\pautoenr.dll, 12-1046

 

[/b]

Hello agnostico

you can upload or send us your suspicious file, and then we can further investigate it. At the same time, you can upload your suspicious file to http://www.virustotal.com for analyzing, and post your analysis report.

 

We are looking forward to your reply.

 

________________

Iobit Support Team

[agnostico]

Pautoenr.dll

 

Hi there!

 

Virus Total analize for pautoenr.dll

http://www.virustotal.com/reanalisis.html?c4aac293db3a5b727a0f56dd2329e0f33b2200677c08a105e51de3afb1918796-1265759070

 

File version: 5.1.2600.5512

File size: 67,0 KB

 

 

Best regards

pautoenr.zip

[hxin]

Hi there!

 

Virus Total analize for pautoenr.dll

http://www.virustotal.com/reanalisis.html?c4aac293db3a5b727a0f56dd2329e0f33b2200677c08a105e51de3afb1918796-1265759070

 

File version: 5.1.2600.5512

File size: 67,0 KB

 

 

Best regards

 

Hello agnostico

We have solved this issue in our update definition 1322.

Thanks for your feedback.