Problem? False positive?

Man of Honour
Joined
5 Dec 2003
Posts
21,063
Location
Just to the left of my PC
For the first time in years, I've had a virus detected during a scan. I'm using AVG Free. The same file has been flagged as being infected with the same virus twice, once on the 2nd and once today.

The file is Amsmpu4p.sys and it's in my main temp directory.

AVG flags it as being infected with Trojan Horse BackDoor.Generic9:CUT and deletes it...although it would be deleted anyway as it's in the temp directory.

Also suspicious are sintf16.ddl, sintf32.dll and sintfnt.dll in the temp directory. What are they doing there?

My Windows directory has bloated up to 3.44GB, though the size on disc is only 3.18GB. Maybe a coincidence - I only noticed because some files created during some audio editing resulted in my system partition filling.

EDIT: Hmm, BitDefender online found two more trojans, in files a couple of years old that have been scanned hundreds of times by AVG, including today. Nothing I can't account for in Autoruns and the only thing I can't account for in process explorer is what the multiple copies of svchost are doing. Either I'm getting false positives or sneaky trojans have been having a field day on my PC...and I don't know for sure which is true.
 
Last edited:
I tried Avast a few weeks ago. A scan took several hours and I didn't like the program in general. Maybe it turns up some positives (false or true) that AVG misses, but the reverse is probably true as well.

I use spybot and ad-aware. I ought to use FireFox with Noscript more, but I'm with AOL and other browsers often don't work with AOL. They'll suddenly be unable to connect to anything and the only solution is a reboot.
 
Last edited:
They are files used by some games and relate to some copyright protection and Amsmpu4p.sys is a system file.
A system file that's in a temp directory and that's flagged as being infected with a virus. That isn't normal for system files.

I knew those dlls related to copyright protection, but I haven't installed any games in the last couple of days and what's the point of an anti-copying program putting dlls in a temp directory?
 
Back
Top Bottom