about the unrecognized files list

CIMA report for info.exe:

  1. I double click on the info.exe

2.then, the info.exe is sandboxed as partially limited

3.the info.exe creates and executes
C:\Documents and Settings\All Users\Application Data\defender.exe

4.I check the unrecognized files list

5.the info.exe is in the list, but the defender.exe is not in it.

Is that a bug?


Can you provide me a sample for a test?

I remenber this defender.exe when I had tested CIS. If I remember it also creates an icon on desktop with the same name i.e defender.exe & the processes in the taskmanager also keeps increasing & decreasing i.e sometimes 2 processes then 3 then 4 then 2 then 1 then 4 like this. At that time my system became too slow. So restarted. After restarted the processes were not there but the desktop icon was there.