MS Anti Spy anomaly.

I use MS Anti Spyware along with Ad Aware from time to time as a scanner. I decided to scan my system after upgrading to the latest signature for my MS Anti Spy, it detected a so-called RAT which turns out to be the latest MS Win2K Support Tool downloaded from MS's site last week.

Check out the attached image.

[Stephanos G.]

hmmm are you sure for this?

Absolutely sure, checked the folder as well and also scanned with Spybot and Ad Aware.

[Paul Wilders]

Submit the file for analysis over here and keep us informed about the result . In case it's not a false postive, give one of the cleaners mentioned over here a try.

regards.

paul

Kaspersky declared it clean, also Avast and Anti Vir.

[Paul Wilders]

Fairly sure a false positive - at least as fro Cyanure. IN MS Antispyware, you can go to tools > suspected spyware report and inform MS about it.

regards,

paul

Thanks Paul, will do, it is ironic as MS is detecting its own software as a spyware when other 3rd party apps clear it.

[Firecat]

Originally Posted by Arup

Thanks Paul, will do, it is ironic as MS is detecting its own software as a spyware when other 3rd party apps clear it.

Hehe....MS does strange things, dont even try to understand why

[gerardwil]

Maybe the description is right?

[Stephanos G.]

Possible the description to be right.

[TheQuest]

Hi, gerardwil

Maybe the description is right?

Are you sure only Maybe?

Take Care,
TheQuest

If you mean by description that the MS remote.exe is a RAT, it is quite contradictory, it came with MS tools downloaded from MS site so I find it highly unlikely plus you will see that scans with major AV have pronounced it to be safe, also, at no point does my firewall or TCP View detect any suspicious activity emanating from that file.