Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer Mac Boost Advice IObit Coupons A Good Utility Program From IObit IObit Promo Codes IObit Coupon Codes IObit Coupons and Deals FAQs Driver Booster Pro Review

False positive? $NtServicePackUninstall$\wab.exe [SOLVED by db 1041]


Recommended Posts

Posted

Hello,

I got this result on my last scan. Is this a false positive. If so, can it still be deleted or should I leave it alone. I did do a search and take the time to check other posts before posting. So, if this has already been asked, I do apologize.

IObit Malware Fighter

 

OS: Windows XP

Version: 1.0.0.12

Define Version: 1040

Time Elapsed: 00:20:57

Objects Scanned: 64254

Threats Found: 1

Save Time: 7/2/2011 5:39:57 PM

 

|Name|Type|Description|ID|

Trojan.Generic, FILE, C:\WINDOWS\$NtServicePackUninstall$\wab.exe, 4041681

Posted

The wab.exe is normally the 'Windows address book' in windows-mail,

but wheather yours may be a Trojan in discuise, I don't know.

It's also normally a system-hidden file I think?

I've heard of that WAB file getting corrupted before, but not because of a trojan.

And the folder it is in is not the same as Mail folder. $NtServicePackUninstall$ is a strange place for it to be.

It's also strange that there a folder named that.

 

I cartainly seems like a good place for one to be Hidden though.

So my guess is that it may be a Trojan or at least something that needs to be deleted.

 

Did you do an Internet search to see if anyone else is reporting it, as a trojan?

Posted

Yes, I did an internet search. I'm not experiencing any problems. Just not sure if this is a false positive or trojan. My experience with files in the window folder is that even if I do a system backup using windows system restore tool before deleting the file, it doesn't always restore files remvoed by spyware tools. Hence, if I have problems afterwards, I can't reverse it. If this is a legitimate file, I wonder why no one else has detected it doing a full scan? Assuming there pc is up do date.

Posted
Hello,

I got this result on my last scan. Is this a false positive. If so, can it still be deleted or should I leave it alone. I did do a search and take the time to check other posts before posting. So, if this has already been asked, I do apologize.

IObit Malware Fighter

 

OS: Windows XP

Version: 1.0.0.12

Define Version: 1040

Time Elapsed: 00:20:57

Objects Scanned: 64254

Threats Found: 1

Save Time: 7/2/2011 5:39:57 PM

 

|Name|Type|Description|ID|

Trojan.Generic, FILE, C:\WINDOWS\$NtServicePackUninstall$\wab.exe, 4041681

Hi loops08

 

Thanks for your feedback.

After investigation, we have assured that it's a false positive. Sorry for the trouble we have caused to you.

 

We will solve this issue in our later update definition 1401.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...