Jump to content

Detection differences


Lynx
 Share

Recommended Posts

Greetings!

{XP Pro, SP3; EAM 6.0.0.56 beta}

There were definite FP detections during Scheduled Scans tests performed this morning :

C:\WINDOWS\system32\notepad.exe detected: Virus.Win32.Virut!E2
C:\WINDOWS\ServicePackFiles\i386\notepad.exe   detected: Virus.Win32.Virut!E2

The thing is – if you would scan the said suspicious files having the same/current EAM signatures using Shell Extension scan - no detections are yelled by EAM when you scan \system32\notepad.exe,

but …\i386\notepad.exe happens to be detected as above

Respectively:

SHA256: 865f34fe7ba81e9622ddbdfc511547d190367bbf3dad21ceb6da3eec621044f5

SHA256: 19b2602b2ff52d358b8c86589f4524e8c762609fd5f483ac22d2fb5a319e0121

My regards

Link to comment
Share on other sites

  • 2 weeks later...
Guest Bob'sYourUncle

Hi Arthur,

Thanks for the reply

No

the issue is still unresolved & stays as initially posted except I am aware of 0.56 stable & beta are currently in sync

Please see PM from Lynx

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...