i am using CIS i have a Problem with the winlogon.exe CIS Antivirus tells me that this is a Trojan. I run a Full scan with Malwarebytes’ Anti-Malware and all the others but they tell me nothing. So is it a infection or not? I cannot send the File directly trough the CIS because this file is in the secure list and secure windows folder. I put the log in attach thank u for your assistance. Also in attach i have packed the file as zip file.
[attachment deleted by admin]
Seems a false positive, I had the same problem with the betas with another system file.
it seems to be fixed with the latest signature update.
i checked it again and run a full scan wit cis av i set it temporally to ignore list. It would be nice if any can check the file and tell if it’s an infection or a false positive, if it’s so then please correct it in the next signature updates. thx
CIS detects it as Trojan.Win32.patched.m.@317082
VirusTotal report - http://www.virustotal.com/analisis/603faccee9b1c4a15d5b04e373116515
Its false positive.
thank u so much for reply. So i can delete it from de ignore list or wait for signature update???
Wait for signature update.
The Anubis Unknown Binaries Analyzer shows the safety of this file. Surely it’s a FP.