winlogon.exe infected File or not?

Hello,

i am using CIS i have a Problem with the winlogon.exe CIS Antivirus tells me that this is a Trojan. I run a Full scan with Malwarebytes’ Anti-Malware and all the others but they tell me nothing. So is it a infection or not? I cannot send the File directly trough the CIS because this file is in the secure list and secure windows folder. I put the log in attach thank u for your assistance. Also in attach i have packed the file as zip file.

regards

[attachment deleted by admin]

Seems a false positive, I had the same problem with the betas with another system file.

Hi,

it seems to be fixed with the latest signature update.

regards

Hi,

i checked it again and run a full scan wit cis av i set it temporally to ignore list. It would be nice if any can check the file and tell if it’s an infection or a false positive, if it’s so then please correct it in the next signature updates. thx

regards

CIS detects it as Trojan.Win32.patched.m.@317082
VirusTotal report - http://www.virustotal.com/analisis/603faccee9b1c4a15d5b04e373116515

Its false positive.

V7chy

Hi,

thank u so much for reply. So i can delete it from de ignore list or wait for signature update???

regards

Wait for signature update.

V7chy

The Anubis Unknown Binaries Analyzer shows the safety of this file. Surely it’s a FP.