guess this is a false positive rogue "safe fighter" trojan, identified by heuristic analysis at the end of scan, apparently related to the program " http://www.newsoftwares.net/folderlock/ .
no false "safe fighter" alerts, and tried to locate it in the registry through scan but to no avail. if I uninstall "folder lock" the scan no longer identifies the rogues.
Here the log:
Version: 2.2.1.1043
Malware Database: v2016.11.24.10
Rootkit Database: v2016.11.20.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Enabled
OS: Windows 10
CPU: x64
File System: NTFS
User: [..]
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 312800
Time Elapsed: 4 min, 31 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 6
Rogue.SafeFighter, c:\users\[..]\desktop\safefighter.lnk, Delete-on-Reboot, [b169cdf7bfdb4ee851c2818b57ab46ba],
Rogue.SafePcAv, c:\users\[..]\desktop\safepcav.lnk, Delete-on-Reboot, [b36773518f0b1026bf5558b42cd66799],
Rogue.SafetyKeeper, c:\users\[..]\desktop\safetykeeper.lnk, Delete-on-Reboot, [24f67b4902987db955c0a567c0424db3],
Rogue.SafetyPC, c:\users\[..]\desktop\safetypc.lnk, Delete-on-Reboot, [22f8f0d4e3b73600e4324cc039c99c64],
Rogue.SafeVaccine, c:\users\[..]\desktop\safevaccine.lnk, Delete-on-Reboot, [0d0d972da9f18fa7a77036d6c73b4db3],
Rogue.SafePrivate, c:\users\[..]\desktop\safeprivate.lnk, Delete-on-Reboot, [86949b29e4b6a78f246a98a5c141926e],
Physical Sectors: 0
(No malicious items detected)
(end)
