Malaware Question

Discussion in 'other anti-malware software' started by kupo, May 4, 2012.

Thread Status:
Not open for further replies.
  1. kupo

    kupo Registered Member

    Joined:
    Jan 25, 2011
    Posts:
    1,122
    I just did a quick scan with Malaware.
    1.) Online Armor did not know it. lol.
    2.) During scan, it try to create an executable
    Created: 04/05/12 19:01:48
    Summary: Program Guard: malaware.exe -> ProxyX64Process_18467.exe
    Description: C:\Users\Standard User\Desktop\malaware.exe wants to create executable file C:\Users\POL DASMA\AppData\Local\Temp\ProxyX64Process_18467.exe
    Event type: Suspicious file(13)
    Event action: Blocked(3)

    Is it normal? I found it weird so I blocked it.
     
  2. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
    I would get some other opinions. Do a Full Scan with each of the following:

    1. Malwarebytes Anti-Malware
    2. Dr.Web Cureit
    3. Emsisoft Emergency Kit
     
  3. kupo

    kupo Registered Member

    Joined:
    Jan 25, 2011
    Posts:
    1,122
    Actually it's malaware that created the file, it's a scanner from Emsisoft, I downloaded it a while ago to try it, I checked and it's digitally signed :D. I asked in their forums if it's part of the function to finished scanning. I just find it weird.
     
  4. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    If you have OA with default configuration the program might have allowed it automatically to scan since it's signed and a trusted source.

    You can try deactivating all the auto stuff, it will turn into a pop up heaven (Like mine). ;)
     
Thread Status:
Not open for further replies.