system32 false positive? [SOLVED by db 1941]

[SECURITY360]

hello! iobit analysis with the result gave me this:

 

IObit Security 360

 

OS:Windows XP

Version:1.5.0.13

Definir Version:1940

Tiempo Transcurrido:00:00:47

Objetos Analizados:49078

Amenazas Encontradas:1

 

|Nombre|Tipo|Descripción|ID|

Misleading.MySecurityShield, File, C:\WINDOWS\system32\drivers\etc\hosts, (un numero que no publico por que no se si me puede identificar como persona)

 

not upload the file to virus total I have no idea how to locate the file in question :roll:

 

saludos :mrgreen:

[scrd01]

got it 2

 

Hi All,

got the same one today, after todays definition update, last run within 24HRS,

 

 

 

IObit Security 360

 

OS:Windows 7

Version:1.5.0.13

Define Version:1940

Time Elapsed:00:01:44

Objects Scanned:51946

Threats Found:1

 

|Name|Type|Description|ID|

Misleading.MySecurityShield, File, C:\Windows\system32\drivers\etc\hosts, 4-31141

 

>>>> just been into the files none have been modified or changed since july

[scrd01]

vt scan

 

scan came back clean, somebody looked at it 9hrs ago

 

Additional information

Show all

MD5 : 3688374325b992def12793500307566d

SHA1 : 4bed0823746a2a8577ab08ac8711b79770e48274

SHA256: 2d6bdfb341be3a6234b24742377f93aa7c7cfb0d9fd64efa9282c87852e57085

ssdeep: 24:QWDZh+ragzMZfuMMs1L/JU5fFCkK8T1rTt8:vDZhyoZWM9rU5fFcp

File size : 824 bytes

First seen: 2009-06-14 01:43:39

Last seen : 2010-11-21 19:40:33

TrID:

Unknown!

sigcheck:

publisher....: n/a

copyright....: n/a

product......: n/a

description..: n/a

original name: n/a

internal name: n/a

file version.: n/a

comments.....: n/a

signers......: -

signing date.: -

verified.....: Unsigned

 

Roy

[hxin]

Hi everybody

 

This is a FP.We will solve this issue in our later update definition 2001.