Threat:Win32:Patched-HO [Trj] in SOFTWARE.OLD

Viruses and worms
1

I ran a full scan today and I received Threat:Win32:Patched-HO [Trj] in SOFTWARE.OLD located in C:\Windows\System32\config\RegBack

I’m unsure if its a false positive or not so I didn’t take any action.

Edit: Accidentally edited over the original post instead of creating a new post whoops… The post was something like this.

2

Malwarebytes came up clean in a full scan with the definitions up to date.

Googling the file showed me that its related to registry, I was going to upload the file to virustotal.com for analyzation as a 2nd opinion but I don’t know if it has personal information on it.

I’m just going to wait for the advice of an expert before I do anything and just turn off my computer for the day because I don’t know if the file is actually malicious or not.

3

follow guide and attach logs. http://forum.avast.com/index.php?topic=53253.0

4

I ran an avast full scan before I left today and the results came up clean, I didn’t modify or delete the file and I made sure that it was set to not take actions by default in the UI.

Something to note that I forgot about is that I did in fact use regedit before prior to the scan yesterday so I have no idea if that influenced the threat in avast, I didn’t modify or delete any keys I just used the search function.

Is it still advisable to post logs even after a clean scan?

5
Is it still advisable to post logs even after a clean scan?
if you want a check.... attach the logs, and check back late tomorrow for result
6

I have no idea if I’m just being paranoid but comodo had aswmbr.exe as unrecognized (which happens sometimes) so I uploaded it to virustotal http://public.avast.com/~gmerek/aswMBR.exe showed 3 results of malware on virustotal https://www.virustotal.com/en/file/10a04071d36ac9a81cce1555b69fbf1a3d23faf09ae1f25261701ec208e2770e/analysis/ I ran aswmbr anyway because I’m pretty sure avast wouldn’t host malware on their site

I will have the rest of the logs posted by tomorrow I don’t have the time to run the programs now

7

malware tools are often detected by AV bc they have virus like behavior