4breezes Posted April 4, 2014 ID:813496 Share Posted April 4, 2014 I ran MBAM (1.75.0.1300) last night, and was told that my system had two trojans. I had just downloaded the current deffinitions data base. I quanantined the triojans, and deleted them, then rebooted. I rebooted twice, and twice received a BSOD, with the blame going to "viaagp1.sys". I had to revert to an "earlier, known good" boot in order the get the system up. The two quarantined and deleted files were: Trojan.FakeMS 4/3/2014 11:12PM File G:\WINNT\ServicePackFiles\i386\csrsrv.dll Trojan.FakeMS 4/3/2014 11:12PM File G:\WINNT\$NtUpdateRollupPackUninstall$\csrsrv.dll These were located on a Win2000 drive, the secondary OS of my dual boot system. The motherboard is a VIA based board, a Gigabyte 7ZXE if memory serves. It has been suggested to me that I may have hit two false positives, and that I should come here to report or receive verification and direction. I appreciate any help and guidance you might have to offer. Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 4, 2014 Staff ID:813540 Share Posted April 4, 2014 can you please zip and attach here copies of the files? G:\WINNT\$NtUpdateRollupPackUninstall$\csrsrv.dll G:\WINNT\ServicePackFiles\i386\csrsrv.dll Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 4, 2014 Staff ID:813547 Share Posted April 4, 2014 Was able to find the file. This is false positive and will be fixed in the next update. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now