Roboscan false positive?

Hi

Does this look like a false positive? I only go online with a limited user account and have all security programs set to high.

Thanks in advance.

 

Judging by your screenshot, it is not a false positive. XP Home Security 2011 is a rogue security tool (Fake Antivirus) that will simulate a system scan, giving false detection. My advice is to remove it immediately.

 

Hi

Thanks for the reply. Nothing has ever popped up on my screen, no simulated scans, etc. Few days ago I was trialing Bit Defender 2013, never picked up anything. Since has been uninstalled.

Malwarebytes and Web Root do not find anything (safe mode)

I do only go online with a limited user account.

I just want to make certain that it's not a false positive.

 

Have you ever had an infection in the past, such as the one displayed in your screenshot (XP Home Security 2011)?

Reason why I ask is, it could be picking up pieces (Registry Entries) that others may have missed during past removal.

 

Hi

Thanks again.

No, never any infections, pop ups, etc. Never any screens that would pop up and state that I was infected, etc.

That's why it is confusing to me.

 

Just to make sure you're not dealing with a false positive, I suggest downloading such tools to make sure

HitmanPro (Sign up for the trial to remove any detected threats), This can be done inside the program itself
Emsisoft Anti-Malware (FREE Version) or Emsisoft Emergency Kit (Portable)
Comodo Cleaning Essentials (Portable)

Make sure to do an update before scanning. HitmanPro won't need one since it's a cloud based, multi engine scanner.

 

It looks like it was flagging Winstep products. I have the Winstep Xtreme installed.

I did manage to run Comodo, Hitman Pro and Emsisoft Emergency kit.

 

Have you tried to quarantine the files? And see what happen..
if it is a false positif you could always restore the file.

 

Hi

Good idea. I'll go ahead and do that.

Thanks.

 

So was it False positive?

 

Yes, looks that way. I had it remove the items everything worked. Now it is back, same entry.

When I scanned with Comodo (which I'll do in a few minutes again) it indicated the path is for Winsteps startup.

 

False positive.