Malware threat in registry, maybe false [SOLVED by db 1630]

[molngab]

Hello!

 

Iobit 360 free detect some malware threats in registry.

See the log file.

But, the other anti malware programs (mbam, superantispyware etc.) don't detect any threat.

So, is this a false alarm?

 

 

 

Thanks

>>>

IObit Security 360

 

OS:Windows 7

Version:1.4.5.67

Define Version:1625

Time Elapsed:00:05:31

Objects Scanned:48223

Threats Found:2

 

|Name|Type|Description|ID|

Misleading.WindowsEnterpriseDefender, Registry Key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe, 4-29612

Misleading.WindowsEnterpriseDefender, Registry Key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe, 4-29613

[enoskype]

Hi molngab,

 

You can upload your suspicious files (egui.exe, ekrn.exe), to www.wikisend.com or send to IObit and then IObit can further investigate them. At the same time, you can upload your suspicious files to www.virustotal.com for analyzing, and post your analysis reports here.

 

 

Cheers.

[KOR]

Hello Molngab-

 

I have the same on my scan with 360. I have scanned with 4 other programs and I do NOT get an alert as to there being any spyware.

 

I do not seem to be able to copy these files to send to have them checked out.

 

I do believe they are FP.

 

Do you have ESET installed as I do on my computer?

 

KOR-

 

 

Hello!

 

Iobit 360 free detect some malware threats in registry.

See the log file.

But, the other anti malware programs (mbam, superantispyware etc.) don't detect any threat.

So, is this a false alarm?

 

 

 

Thanks

>>>

IObit Security 360

 

OS:Windows 7

Version:1.4.5.67

Define Version:1625

Time Elapsed:00:05:31

Objects Scanned:48223

Threats Found:2

 

|Name|Type|Description|ID|

Misleading.WindowsEnterpriseDefender, Registry Key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe, 4-29612

Misleading.WindowsEnterpriseDefender, Registry Key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe, 4-29613

[pyrath]

a google search showed both originating from "eset smart security"

 

@@@www.processlibrary.com/directory/files/ekrn/

@@@www.whatsrunning.net/whatsrunning/QueryProcessID.aspx?Process=16035

[hxin]

Hi

 

I have installed NOD32 and doesn‘t detect this.

 

You can google "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe".

 

There will be a lot of information about it.

[hxin]

Hi

 

I'm sorry about this Problem.

After our check， This is a FP.

We will solve this issue in our later update definition 1630.

 

Cheers

Hx