BPS finds uninst.exe as spyware, but looks legit in most

Discussion in 'Spyware' started by see.my.sig.4.addr, Jan 5, 2006.

  1. AVG just found about 6 instances of uninst.exe and flagged it as possible
    spyware. Oddly, it says AntivirusGold for "system" for all of them. I
    don't have anything called AntivirusGold. But, some of the things it tags
    as that I know are not, such as AVG.exe, which is AVG AV and is it's
    proper location. Obviously, many if not all are false positives. My
    question is, is there ANY uninst.exe out there that is spyware or a trojan
    to worry about? The only one I have that's suspect is one under the
    Windows dir. Probably just another sloppy program that can stay in it's
    own dir, but who knows.
     
    see.my.sig.4.addr, Jan 5, 2006
    #1
    1. Advertisements

  2. From: <>

    | AVG just found about 6 instances of uninst.exe and flagged it as possible
    | spyware. Oddly, it says AntivirusGold for "system" for all of them. I
    | don't have anything called AntivirusGold. But, some of the things it tags
    | as that I know are not, such as AVG.exe, which is AVG AV and is it's
    | proper location. Obviously, many if not all are false positives. My
    | question is, is there ANY uninst.exe out there that is spyware or a trojan
    | to worry about? The only one I have that's suspect is one under the
    | Windows dir. Probably just another sloppy program that can stay in it's
    | own dir, but who knows.
    | --
    | _____________________________________________________
    | For email response, or CC, please mailto:see.my.sig.4.addr(at)bigfoot.com.
    | Yeah, it's really a real address :)

    "Antivuris Gold" is the name but it is definitely malware !
    http://www.spywarewarrior.com/rogue_anti-spyware.htm



    Please submit a sample of "uninst.exe" to Virus Total --
    http://www.virustotal.com/flash/index_en.html
    The submission will then be tested against many different AV vendor's scanners.
    That will give you an idea what it is and who recognizes it. In addition, unless told
    otherwise, Virus Total will provide the sample to all participating vendors.

    You can also submit a suspect, one at a time, via the following email URL...
    mailto:?subject=SCAN

    When you get the report, please post back the exact results.
     
    David H. Lipman, Jan 5, 2006
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.