Re: False Positive with AVG Free? in Security http://www.dslreports.com/forum/r18684167 en Wed, 10 Feb 2010 11:40:38 EDT Wed, 10 Feb 2010 11:40:38 EDT Re: False Positive with AVG Free? http://www.dslreports.com/forum/remark,18686438 sammysnake :
said by caffeinator See Profile :

It's "MadCodeHook" tool from a legit company, and can/may be used by malware...but is also used by legit programs.

Found this:

»www.softwaretipsandtricks.com/da···sys.html

quote:
MchInjDrv.sys is a driver for injecting code to other processes.
Publisher is legitimate:
»madshi.net
But it is often used by malicious software.
Kill the file mchInjDrv.sys and remove mchInjDrv.sys from Windows startup.


Another thread at Kaspersky: »forum.kaspersky.com/lofiversion/···351.html

I guess it depends on what you have installed, or may have installed recently.

You could try uploading to Jotti or Virustotal for more checks.

-CaFF
I would attempt to uplaod to Jotti or Virustotal but I do not have a file called "mchInjDrv.sys" anywhere on my system. :(]]> http://www.dslreports.com/forum/remark,18686438 Tue, 17 Jul 2007 02:22:24 EDT Re: False Positive with AVG Free? http://www.dslreports.com/forum/remark,18685165 caffeinator : It's "MadCodeHook" tool from a legit company, and can/may be used by malware...but is also used by legit programs.

Found this:

»www.softwaretipsandtricks.com/da···sys.html

quote:
MchInjDrv.sys is a driver for injecting code to other processes.
Publisher is legitimate:
»madshi.net
But it is often used by malicious software.
Kill the file mchInjDrv.sys and remove mchInjDrv.sys from Windows startup.


Another thread at Kaspersky: »forum.kaspersky.com/lofiversion/···351.html

I guess it depends on what you have installed, or may have installed recently.

You could try uploading to Jotti or Virustotal for more checks.

-CaFF
--
"Only two things are infinite, the universe and human stupidity, and I'm not sure about the former." - A. Einstein

Need an Avatar? Check out Wafen's Avatar Pages]]> http://www.dslreports.com/forum/remark,18685165 Mon, 16 Jul 2007 22:44:30 EDT Re: False Positive with AVG Free? http://www.dslreports.com/forum/remark,18684167 ezdsl : I checked my AVG log and found what was reported to be a virus (don't remember exactly which as I'm at work at the moment) logged over the weekend.

Today, I ran a full scan and nothing was found. I checked the AVG forums (»forum.grisoft.cz/freeforum/list.php?4) and found several false positives in the last couple of days.

Glitch on a weekend update? Maybe???]]> http://www.dslreports.com/forum/remark,18684167 Mon, 16 Jul 2007 20:30:58 EDT False Positive with AVG Free? http://www.dslreports.com/forum/remark,18684111 sammysnake : I turned on my computer today and in the history log of AVG Free I had the following listed:

"2007/07/16 16:07:29" user="SYSTEM" source="Virus"
@HL_ReportFindRS filename> C:\WINDOWS\system32\drivers\mchInjDrv.sys
finding > @EID_Id_trj
virusname > BackDoor.Generic7.NZJ

Now I do a complete scan with AVG Free, AVG Anti-Spyware, Ad-Aware, Spybot, Windows Defender, and Trojan Hunter on a weekly basis every Friday night. All of these scans were done on 7/13 and all came up clean. The computer was not even turned on over the weekend.

I got the above after doing a manual update of AVG Free after turning on the computer this evening. No one had access to the computer all weekend.

Just for the hell of it I have redone all of the above scans and they all come up clean.

This has got me baffled. :mad:

Any suggestions?

Sammy :(]]> http://www.dslreports.com/forum/remark,18684111 Mon, 16 Jul 2007 20:23:18 EDT