http://www.dslreports.com/forum/r18947944 en Fri, 27 Nov 2009 21:49:13 EDT Fri, 27 Nov 2009 21:49:13 EDT http://www.dslreports.com/forum/remark,18948919 La Luna : Wow, talk about a quick response and fix. Awesome!! Just another reason why I like TH. :)]]> http://www.dslreports.com/forum/remark,18948919 Sat, 25 Aug 2007 16:05:30 EDT http://www.dslreports.com/forum/remark,18948657 sammysnake : Thank you again Magnus, all is well in snakeland again as shown:

Registry scan
No suspicious entries found
Inifile scan
No suspicious entries found
Port scan
No suspicious open ports found
Memory scan
No trojans found in memory
File scan
No trojan files found

Sammy :D]]> http://www.dslreports.com/forum/remark,18948657 Sat, 25 Aug 2007 15:04:58 EDT http://www.dslreports.com/forum/remark,18948479 MagnusM : Ah... this has to do with support for scanning 64-bit executables that was recently added. The scanner doesn't recognize the machine type flag in the files listed above and throws an error. Of course, that shouldn't be happening so I will fix this ASAP.

If anyone is interested in the technical explanation, the files that give this error are files with machine type IMAGE_FILE_MACHINE_IA64, which is the Itanium architecture. This is separate from the x64 (AMD-64) architecture which is just the regular 64-bit format, which is why it was omitted.

Thanks Sammy for reporting this! I will upload a corrected version to the servers in the next 30 minutes.
--
Mischel Internet Security
http://www.misec.net]]> http://www.dslreports.com/forum/remark,18948479 Sat, 25 Aug 2007 14:24:29 EDT http://www.dslreports.com/forum/remark,18948385 sammysnake : Now I get this when I do a full scan with the latest updated defs:

Registry scan
No suspicious entries found
Inifile scan
No suspicious entries found
Port scan
No suspicious open ports found
Memory scan
No trojans found in memory
File scan
Error: Error while scanning C:\DELL\MEDIAEXE\PXCPYI64.EXE: Unknown machine type: 0x200 (C:\DELL\MEDIAEXE\PXCPYI64.EXE)
Error: Error while scanning C:\DELL\MEDIAEXE\PXHELP64.SYS: Unknown machine type: 0x200 (C:\DELL\MEDIAEXE\PXHELP64.SYS)
Error: Error while scanning C:\DELL\MEDIAEXE\PXINSI64.EXE: Unknown machine type: 0x200 (C:\DELL\MEDIAEXE\PXINSI64.EXE)
Error: Error while scanning C:\DELL\PXCPYI64.EXE: Unknown machine type: 0x200 (C:\DELL\PXCPYI64.EXE)
Error: Error while scanning C:\DELL\PXHELP64.SYS: Unknown machine type: 0x200 (C:\DELL\PXHELP64.SYS)
Error: Error while scanning C:\DELL\PXINSI64.EXE: Unknown machine type: 0x200 (C:\DELL\PXINSI64.EXE)
Error: Error while scanning C:\I386\PMSPL.DLL: This is not a PE format
Error: Error while scanning C:\I386\pxcpyi64.exe: Unknown machine type: 0x200 (C:\I386\pxcpyi64.exe)
Error: Error while scanning C:\I386\pxinsi64.exe: Unknown machine type: 0x200 (C:\I386\pxinsi64.exe)
Error: Error while scanning C:\WINDOWS\SYSTEM32\PMSPL.DLL: This is not a PE format
Error: Error while scanning C:\WINDOWS\SYSTEM32\pxcpyi64.exe: Unknown machine type: 0x200 (C:\WINDOWS\SYSTEM32\pxcpyi64.exe)
Error: Error while scanning C:\WINDOWS\SYSTEM32\pxinsi64.exe: Unknown machine type: 0x200 (C:\WINDOWS\SYSTEM32\pxinsi64.exe)
No trojan files found

:uhh:

Mind you.... the files listed above have always been on this machine and have never been flagged before.

Sammy]]> http://www.dslreports.com/forum/remark,18948385 Sat, 25 Aug 2007 14:07:16 EDT http://www.dslreports.com/forum/remark,18948065 sammysnake : Thank you Magnus! :D]]> http://www.dslreports.com/forum/remark,18948065 Sat, 25 Aug 2007 13:04:26 EDT http://www.dslreports.com/forum/remark,18948007 MagnusM : Thanks, file received and analyzed. This is indeed a false positive and I've uploaded corrected signatures. Run LiveUpdate and this file should no longer be detected on your next scan.
--
Mischel Internet Security
http://www.misec.net]]> http://www.dslreports.com/forum/remark,18948007 Sat, 25 Aug 2007 12:55:14 EDT http://www.dslreports.com/forum/remark,18947944 sammysnake : File sent.

Thanks Magnus. :D

Sammy :D]]> http://www.dslreports.com/forum/remark,18947944 Sat, 25 Aug 2007 12:44:28 EDT http://www.dslreports.com/forum/remark,18947881 hayc59 : Magnus, hello and kudos for stoppin by ;)]]> http://www.dslreports.com/forum/remark,18947881 Sat, 25 Aug 2007 12:34:41 EDT http://www.dslreports.com/forum/remark,18947873 MagnusM : This is almost certainly a false positive. Could you email the file to support@misec.net for analysis?
--
Mischel Internet Security
http://www.misec.net]]> http://www.dslreports.com/forum/remark,18947873 Sat, 25 Aug 2007 12:32:53 EDT http://www.dslreports.com/forum/remark,18947779 sammysnake : I just finished updating AVG Free, defs from 8/24/07, and Trojan Hunter, defs from 8/25/07, and while AVG comes up clean Trojan Hunter flags this: Found trojan file: C:\Program Files\Grisoft\AVG Free\avgmvfl.dll (Generic.LdPinch.A)

Anyone else seeing this and is it a FP?

Sammy]]> http://www.dslreports.com/forum/remark,18947779 Sat, 25 Aug 2007 12:17:47 EDT