Intel AA_v36.exe/v34 - false positive ?

Viruses and worms
1

Hi,

I executed the Free Avast on my sister laptop, and the following was flagged :

c:\Intel\AA_v36.exe
PUP:Win32:RemoteAdmin-L [Tool]

c:\Intel\AA_v34.exe
PUP:Win32:RemoteAdmin-K [Tool]

However, trying to search the web for a, I just could find about it being a Remote Acces program.

Is this a false positive ?

s

2

PUP:Win32:RemoteAdmin-L [Tool] > PUP = Possible Unwanted Program

So avast is telling you that you have a remote admin tool, and it may be wanted or unwanted

You can upload file(s) ( c:\Intel[b]AA_v36.exe[/b] / c:\Intel[b]AA_v34.exe[/b] ) to www.virustotal.com and check it with multiple (70) AV engines for a second opinion

You may post link to scan result here

From the file name it seems to belong to Ammyy Admin remote control application

3

82% detected here as 27% give it as malicious:
https://www.hybrid-analysis.com/sample/d67c7ef1c8e2cd56e266902bef814ac328d64bbe06086f4ee24fbadbebf39605?environmentId=120

polonus