Trojan agent in windows 8.1 upgrade.

Customer

• June 03, 2021 16:51

I have 3 pc's runing windows 8 and every time I upgrade to windows 8.1 ad-aware version 9 detects:

Removed items:

DADAWARE LOG.txtescription: c:\windows\system32\msac3enc.dll Family Name: Win32.Trojan.Agent Engine: 1 Clean status: Reboot required Item ID: 0 Family ID: 936 MD5: 62207e4130c3caa8a24ae799ee9ad4f4
Description: c:\windows\system32\wmspdmod.dll Family Name: Win32.Trojan.Agent Engine: 1 Clean status: Reboot required Item ID: 0 Family ID: 936 MD5: cb01832f127211fae7ce1a8d7e73805a
Description: c:\windows\winsxs\x86_microsoft-windows-msac3enc_31bf3856ad364e35_6.3.9600.16384_none_397e9280973e0d1b\msac3enc.dll Family Name: Win32.Trojan.Agent Engine: 1 Clean status: Reboot required Item ID: 0 Family ID: 936 MD5: 62207e4130c3caa8a24ae799ee9ad4f4
Description: c:\windows\winsxs\x86_microsoft-windows-wmspdmod_31bf3856ad364e35_6.3.9600.16384_none_8ecf94158b76caa7\wmspdmod.dll Family Name: Win32.Trojan.Agent Engine: 1 Clean status: Reboot required Item ID: 0 Family ID: 936 MD5: cb01832f127211fae7ce1a8d7e73805a.

 

This is only detecte by AD-AWARE and it always reappears after restart ..It happens on any of my 3 pc's even with a new windows partition..

I apreciate any help on this issue..

Thanks

 

 

0

• 

  Customer

  • June 03, 2021 16:51

  
  

  Hi dongo,

   

  Thanks for your report. These files are false positives and have been removed from detection.

   

  Regards,

   

  Andy

  Lavasoft Malware Lab

  0
• 

  Support

  • June 03, 2021 16:51

  
  

  Hi dongo,

   

  
  It's probably false positive, but please follow the guide http://www.lavasoftsupport.com/index.php?showtopic=18033 and upload the detected files too.

  0

Please sign in to leave a comment.