system32 FP [SOLVED by db 2001]

[montrealcity]

i believe these files are from my samsung kies software.

 

 

 

IObit Security 360

 

OS:Windows 7

Version:1.5.0.10

Define Version:1941

Time Elapsed:00:01:18

Objects Scanned:50373

Threats Found:33

 

|Name|Type|Description|ID|

Trojan.Win32/Agent, Folder, C:\Windows\system32\System32, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\cis-2.4.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\issacapi_bs-2.3.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\issacapi_pe-2.3.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\issacapi_se-2.3.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MACXMLProto.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MaDRM.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MaJGUILib.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MaJUtilLib.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MAMACExtract.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MASetupCaller.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MASetupCleaner.exe, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MaXMLProto.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MetaStore2.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\Microsoft.Synchronization.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MK_Lyric.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MSCLib.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MSFLib.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MSLUR71.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\msvcp60.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MTTELECHIP.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\MTXSYNCICON.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzaf1.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzapp.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzapp.exe, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzdecode.ax, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzeffect.ax, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzmp4sp.ax, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzmpgsp.ax, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzoggsp.ax, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\muzwmts.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\psapi.dll, 3-1420

Trojan.Win32/Agent, File, C:\Windows\system32\System32\Synchronization2.dll, 3-1420

[So_sad]

Hi there montrealcity, and welcome to the forum :-)

 

To answer your question : nope, the files are bad. Look closely :

 

|Name|Type|Description|ID|

Trojan.Win32/Agent, Folder, C:\Windows\system32\System32, 3-1420

 

C:\Windows\system32\ would be the correct system directory for your Samsung related files, but...

 

C:\Windows\system32\system32\ is dropped by a nasty :twisted:

 

Pretty sneaky, huh...

 

===

 

Edit : well it seems you may have been right. Samsung Kies software does seem to create that folder. But that's a big NO-NO on their part, and many security tools are detecting and removing the folder with all files inside. No one should EVER code software to create such a folder inside the system directory, so all I can say is... bad luck for you with the software, and shame on Samsung for doing this...

[montrealcity]

hello and thank you for looking into my report!! very much appreciated :-D

i scanned my pc today after the update and no threats where found!

does that mean you cool guys fixed it so it doesn't show as a threat?

[enoskype]

Most probably db version 2001 has solved those false positives.

 

Cheers.