Just wanted let everyone know I am submitting a file for a F/P report. It is from TrendMicros Sysclean package. The file in question is the .exe that Sysclean.com creates on when executed, I use the extracted files for OD scans on PC’s from WinPE, it is picking it up in the build dir’s I use. I will email this file today/tonight.
Just guessing (as I haven’t seen the file), but if it’s a TrendMicro file, it might be another case of plaintext (not encrypted) virus signatures - i.e. nothing we could do anything about.