Jump to content

Detection differences


Recommended Posts

Greetings!

{XP Pro, SP3; EAM 6.0.0.56 beta}

There were definite FP detections during Scheduled Scans tests performed this morning :

C:\WINDOWS\system32\notepad.exe detected: Virus.Win32.Virut!E2
C:\WINDOWS\ServicePackFiles\i386\notepad.exe   detected: Virus.Win32.Virut!E2

The thing is – if you would scan the said suspicious files having the same/current EAM signatures using Shell Extension scan - no detections are yelled by EAM when you scan \system32\notepad.exe,

but …\i386\notepad.exe happens to be detected as above

Respectively:

SHA256: 865f34fe7ba81e9622ddbdfc511547d190367bbf3dad21ceb6da3eec621044f5

SHA256: 19b2602b2ff52d358b8c86589f4524e8c762609fd5f483ac22d2fb5a319e0121

My regards

Link to post
Share on other sites
  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...