Avast Detects SuperAntiSpyware, False Positive??

Viruses and worms
1

I recently downloaded SUPERAntiSpyware for my laptop and in an Avast Full Scan, it finds this:

Process 1456 [superantispyware.exe], memory 0x0000000019B80000, block size 44949504
Severity: High
Threat: Win32:Crypt - NZR [Trj]

Im hoping its a false positive and not a real infection… I hope you can tell me or not.
And yes, the scan was set to scan memory objects.

Windows 7 64-bit, Avast Free 7, SUPERAntiSpyware Free.

Thankyou (I know I should update to Avast 8, but, whats the worst that could happen if it doesn’t work? I’ve heard for some people it doesn’t work and affects they’re computers, so I wanted to wait a bit)

2

Submit that file to Jotti and let us know what is says.

3

I’ve never used or heard of Jotti before, is it safe and I won’t have to deactivate my Antivirus?
But the thing is, the superantispyware thing avast detects doesn’t look like its a ‘file’, so where do I look to find it to send it to Jotti? Or is it superantispyware.exe that I need to send to Jotti?

Also, what I forgot to mention before was that on my other computer with Avast Free and SUPERAntiSpyware Free, Avast doesn’t do this. The only difference is that this one is Avast 7 (And Windows 7) and the other is Avast 8. (Windows Vista)

Did I download a trojan? Should I uninstall SUPERAntiSpyware and see if its still there?

Thanks

4

It’s in memory – it can be uncrypted malware signature.

Milos

5
I've never used or heard of Jotti before, is it safe and I won't have to deactivate my Antivirus?
Safe = Yes deactivat = NO
Process 1456 [superantispyware.exe], memory 0x0000000019B80000, block size 44949504 Severity: High Threat: Win32:Crypt - NZR [Trj]
did you run a custom scan and slected "Scan Memory" ?
6

difficult…as it is not a file :wink:

[b]Process 1456[/b] [superantispyware.exe], memory 0x0000000019B80000, block size 44949504
7

So what do I do? Is it bad? What other information can I provide so that you can check if its a false positive or not??

And yes, I did a custom scan and selected Scan Memory.

8

Read reply #3, please.

Milos

9

dont select “scan memory” and problem is gone

Detection in memory or memory scan is the second most asked question here, so lots of info if you forum search

10

So it is definitely NOT a real infection? Because Avast does not detect superantispyware.exe on my other computer, and I double checked and the custom scans had the same settings.
The only difference, between the 2 computers is, this computer is Windows 7 [b]64-bit with Avast Free 7 and SUPERAntispyware Free while the other is Windows Vista [b]32-bit with Avast Free 8 and SUPERAntispyware Free.

11
So it is definitely NOT a real infection?
did you read what milos Said.....you are detecting virus signatures from SAS And this have been posted a million times so do a forum search
12

Oh okay, Im sorry, I didn’t understand what he meant… :confused: Now I do…

EDIT: Okay, Avast on my other computer DOES also detect susperantispyware.exe as Win32:Crypt - NZR [Trj]

13

Hi there!
My advice to all. Do not download these 4 freewares :

Adaware contain malware
Super AntiSpyware Scan contain tracking ware
Spybot S&D 2 something is there
Prevx 3.0 will download WebRoot without your consent and install it with a WRkrn.sys upon bootup

Failed to detect Freeze.com and other viruses. These 4 only subdued viruses,etc. for awhile. Once uninstalled from your system.
Your system is like mine.

14

Well, I have SUPERAntiSpyware, not Super AntiSpyware Scan.

15

That is what was left in my registry: Super Anti Spyware scan.Possible a fake anti spyware app that is a knock off of the real stuff.Watch out for detection apps that are fakes.