winlogon.exe infected File or not?

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
#1

Hello,

i am using CIS i have a Problem with the winlogon.exe CIS Antivirus tells me that this is a Trojan. I run a Full scan with Malwarebytes’ Anti-Malware and all the others but they tell me nothing. So is it a infection or not? I cannot send the File directly trough the CIS because this file is in the secure list and secure windows folder. I put the log in attach thank u for your assistance. Also in attach i have packed the file as zip file.

regards

[attachment deleted by admin]

#2

Seems a false positive, I had the same problem with the betas with another system file.

#3

Hi,

it seems to be fixed with the latest signature update.

regards

#4

Hi,

i checked it again and run a full scan wit cis av i set it temporally to ignore list. It would be nice if any can check the file and tell if it’s an infection or a false positive, if it’s so then please correct it in the next signature updates. thx

regards

#5

CIS detects it as Trojan.Win32.patched.m.@317082
VirusTotal report - http://www.virustotal.com/analisis/603faccee9b1c4a15d5b04e373116515

Its false positive.

V7chy

#6

Hi,

thank u so much for reply. So i can delete it from de ignore list or wait for signature update???

regards

#7

Wait for signature update.

V7chy

#8

The Anubis Unknown Binaries Analyzer shows the safety of this file. Surely it’s a FP.