False Positive !!!

Avast Free Antivirus / Premium Security
1

Hello Everyone,

I am running Windows XP pro with Avast 4.1 Pro & the latest VPS and Program build.

Upon Starting Avast & during memory test I get a message :Virus Found ,

Trojan-gen {other}
c:\windows\windows 32\mixhbkk.dll

This happens only during the memory test cycle. When I scan my hard disk I get a clean report with no viruses found! I used TrendMicro online scan and came up clean as well, I also used eScan from MicroWorld and I came up clean also.

I disabled System restore and initiated a thorough scanning and then did a reboot, and still the warning came up!

So I ask myself, what is going on, could this be a false positive and how certain can I be of that. Please, could some of the tech savy people out there give me some clue. Thank you in advance.

Cheers, :slight_smile:

2

This is hardly a false-positive. Instead, it may be a clever Trojan that is disguising itself in a sophisticated way.

First, check the path - it doesn’t seem to be correct. I guess it should read

c:\windows\windows\system32\mixhbkk.dll

Next, check if the file exists. It’s likely that it doesn’t exist - that’s because the Trojan is hiding it (or deleting it just after loading it to memory)…

3

Hello Vlk,

Thank you for your reply, I can confirm that the path is always :

c:\windows\system32:mixhbkk.dll

And your suspecion is correct, the file does not exist! Please advise. Thank’s

AD

4

Search on several search engines. Not one of them gave any result on that file. Don’t know if this information will help, but thought I should mention it.

5

Hi Artras,

I have search for this file but as you have and found no refrence to such file !

I suspect it is not part of any system file thats for sure. Thank you for your reply.

Cheers :slight_smile:

6

Its impossible that path Windows\Windows\System32 is a system path doh. Even filename has no description on the net which is quiet usual for system files. Even other AV are not perfect…