Assigned Zemana False Positive Report Thread

[DJ Panda]

@TwinHeadedEagle

Nope I think its fixed.

 

[Mops21]

Hi

Here are 1 File for you

Xvirus Personal Guard 5.4.1.3.exe
Status : Gescannt
Pfad : %userprofile%\music\secureaplus fps\xvirus personal guard 5.4.1.3.exe
MD5-Hash : D19FB9DD5E0B0B803757AA4B630C1D99
Herausgeber : -
Größe : 5856768
Version : 5.4.1.3
Bedrohung : TrojanCryptor:Win32/Generic
Gewählte Aktion : Quarantäne
Spuren :
Datei - %userprofile%\music\secureaplus fps\xvirus personal guard 5.4.1.3.exe


With best Regards
Mops21

 

[TwinHeadedEagle]

Why is it in that folder? Is this a setup file?

Xvirus Personal Guard

The one you provided looks suspicious for me. Please download the one from official link.

 

[Mops21]

Why is it in that folder? Is this a setup file?

Xvirus Personal Guard

The one you provided looks suspicious for me. Please download the one from official link.

Hi

Yes it is a Setup Fle. The File must I send to SecureAPlus for check

With best Regards
Mops21

 

[yigido]

Windows ISO Downlaoder.exe
Download - Homepage

Detection:

 

[TwinHeadedEagle]

@yigido

Please let me know if it is clean now.

 

[yigido]

@yigido

Please let me know if it is clean now.

Drg&Drop scanned and file did not detected. Thanks

 

[Noxx]

Are you sure that file's legit? You just reported in shout that you just got something "worse than ransomware". I've always thought to never download a Windows ISO anywhere BUT Microsoft's official website.

 

[yigido]

Are you sure that file's legit? You just reported in shout that you just got something "worse than ransomware". I've always thought to never download a Windows ISO anywhere BUT Microsoft's official website.

Pretty sure, file is clean.

 

[DJ Panda]

Are you sure that file's legit? You just reported in shout that you just got something "worse than ransomware". I've always thought to never download a Windows ISO anywhere BUT Microsoft's official website.

I think he said it was a robbery...? Anyway I am pretty sure the ISOs are actually downloaded from a Microsoft original website. Almost like a link mirror. I tried using the Media Creation Tool but it kept failing but this is pretty good. I was going to report the same FP but it was done for me.

https://www.virustotal.com/it/file/...9be2d0c2dda0f99c004b66f07fd97432169/analysis/

 

[Overkill]

Shortcuts created via sbie

 

[TwinHeadedEagle]

@Overkill

Can you click on Send Feedback and we will take a look at it?

 

[Overkill]

Sure

 

[TwinHeadedEagle]

Okay, please let me know when you do it.

 

[Overkill]

sent

 

[MadDemon64]

Today I tried creating a scheduled task to create system restore points once a week. I used the method and scripts mentioned on sevenforums (here is a link to the thread) and with a little help got it running. However, Zemana thinks that what I created is a Trojan. Nothing else seems to label them as trojans.

Is this normal?

Zemana AntiMalware 2.21.179.15 (Installed)

-------------------------------------------------------
Scan Result            : Completed
Scan Date              : 2016/6/23
Operating System       : Windows 10 64-bit
Processor              : 8X Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz
BIOS Mode              : UEFI
CUID                   : 00A92F32062C0B4C6CE8DE
Scan Type              : Smart Scan
Duration               : 0m 50s
Scanned Objects        : 9372
Detected Objects       : 3
Excluded Objects       : 0
Read Level             : Normal
Auto Upload            : Enabled
Detect All Extensions  : Disabled
Scan Documents         : Disabled
Domain Info            : WORKGROUP,0,2

Detected Objects
-------------------------------------------------------

Trojan:Win32/Poweliks
Status             : Scanned
Object             : %systemroot%\system32\tasks\system restore hope|c:\windows\system32\cmd.exe
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Fileless Malware
Cleaning Action    : Delete
Related Objects    :
                Scheduled Task - C:\WINDOWS\System32\Tasks\System Restore Hope

Trojan:Win32/Poweliks
Status             : Scanned
Object             : %systemroot%\system32\tasks\system restore test|c:\windows\system32\cmd.exe
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Fileless Malware
Cleaning Action    : Delete
Related Objects    :
                Scheduled Task - C:\WINDOWS\System32\Tasks\System Restore Test

Trojan:Win32/Poweliks
Status             : Scanned
Object             : %systemroot%\system32\tasks\system restore|c:\windows\system32\cmd.exe
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Fileless Malware
Cleaning Action    : Delete
Related Objects    :
                Scheduled Task - C:\WINDOWS\System32\Tasks\System Restore

 

[TwinHeadedEagle]

@MadDemon64

Can you click Send Feedback option within Zemana GUI? When we receive it I will let you know about outcome.

Thanks!

 

[MadDemon64]

@MadDemon64

Can you click Send Feedback option within Zemana GUI? When we receive it I will let you know about outcome.

Thanks!

Ok I just sent the feedback.

 

[TwinHeadedEagle]

Thank you, we received it.

 

[TwinHeadedEagle]

Can you open this task within Task Scheduler and click Actions tab? Then make a screen shot.