hkcmd.exe Trojan?

Hi,
I just did a scan with ewido with the current database.
and it came up with "TrojanDropper.Agent.le" it was the file hkcmd.exe in the system32 directory. I did a google search for hkcmd.exe and found nothing at all of any trojans,it had a security risk of 0. it is meant to be a intel graphics driver file.
I also searched for trojandropper.agent.le and found absoloutly nothing.
I have cleaned it and quarrantined it. and the file is no longer in sys32 dir.

can anybody tell me anything about this?

please help
thanks

 

Should be a false postive Will be fixed.
Edit: fixed

 

Hi fish25,

Is it an error?SORRY i just saw your edit

if so what should i do.
The trojan was found in

system32\hkcmd.exe
system32\reinstallbackups\0015\driverfiles\hkcmd.exe
and 2 in a system restore point

do i need to retore them.

Is this trojan also called trojandownloader.agent.le
as i did recieve a popup which resembled this trojan, as found with a google search.

 

Yes, simply restore the files... Sorry for the inconvenience!

 

Hi fish25,
Sorry for being a little paranoid,
I did spot some weird behaviour from my computer not long before i did this scan. Similar to what happens with the trojan "trojandownloader.agent.le"
I got a pop up saying that my computer was infected and to download a program by selecting download. My computer is usually squeeky clean. never get popups or anything.
Is it possible that the trojan could have used this file?
can I send the sample anywhere? if so how do i do it?

cheers

 

I did a search on my computer for hkcmd.exe
and there were still 2 there in IBM files. so it didnt get all of them. That brings me to the question, what is different about those 2 files? how come they didnt get flagged?

 

Could you please send all of the files to submit@ewido.net? Thanks

 

how do i send them from quarantine?

 

The files are located in "ewido\security suite\Quarantine", unfortunately they are not named like the infections so better send them all

 

Sent

thanks fish25

 

Nothing but a false positive