Is This A False Positve?

See attachment.

This is my JMicron RAID driver used to control my eSATA and optical IDE DVD drives as far as I know. The .exe has a valid certificate although program details are missing.

so you did a custom scan and selected “scan memory” ?

if doing a custom scan, DO NOT use the “scan memory” setting as this often gives some strange scan results

i recomend using the default quick / full scan with default settings

so you did a custom scan and selected "scan memory" ?
Yes I did.
i recomend using the default quick / full scan with default settings
Did a quick scan just a couple of hours ago.

Did mutilple full scans with Avast, MBAM, and Emmisoft over the weekend. All clean.

I will ignore this. Thanks

you are not the first one, if you hit the forum serch button at the top and search for “scan memory” with quotes you will see :wink:

@ DonZ63

There are a number of detections in memory for Kelihos-S on many different files (see forum search feature) and I believe this is an FP in the Kelihos-S signature, aside from it being a detection in memory.