Zaire Posted April 23, 2013 ID:673033 Share Posted April 23, 2013 Hello,I did a typical quick scan and DevFind.exe came up in a temp folder. I ran a scan earlier and nothing came up. So I assume I got this via some site I visited (my guess it was a blog post I got a link to that turned out to be a conspiracy theory site....)Anyhow I let malwarebytes do its thing, quarantined it, rebooted and did another quick scan - nothing came up. I'm running a full scan now. Thing is I can't find ANYTHING credible about what this actually is. All that comes up are redflagged sites that WOT has in the red and all of them sound like infected sites themseleves.Has anyone heard of this? Link to post Share on other sites More sharing options...
MrCharlie Posted April 23, 2013 ID:673134 Share Posted April 23, 2013 I found a couple of sites giving some info:http://www.pcpitstop...evFind.exe.htmlhttp://www.prevx.com...EVFIND.EXE.htmlIf you used MB to delete it, it should still be in quarantine, if you want more info on it.....restore it and then upload it to VirusTotal for a free scan. (Copy back the url)http://www.virustotal.com/MrC Link to post Share on other sites More sharing options...
Zaire Posted April 23, 2013 Author ID:673222 Share Posted April 23, 2013 Thank you for the help!I did a full scan and eveything came up clean. Seems it was a false positive. I restored the file did a quick MB scan and nothing came up. Seems the file is used by the network card on my laptop. It was located in the temp folder with the set up files for it. I'd disabled the card in the past due to issues with the software. This had happened before now that I think back only with a different part of the set up package. The file also looks to be associated with IP Camera software apparently. My guess is the file is just a part of certain set up packages for particular hardware.I checked the file on virus tool also. The detection ration was 0/46...so it seems the file is clean.https://www.virustotal.com/en/file/142e61f3cd4775648902b0eed5567e697f2d39c76d0aaedf6cfb282922ad61c4/analysis/1366749083/ Link to post Share on other sites More sharing options...
MrCharlie Posted April 23, 2013 ID:673237 Share Posted April 23, 2013 OK, you have your answer.Take a look at My Preventive Maintenance to avoid being infected again.Good Luck and Thanks for using the forum, MrC Link to post Share on other sites More sharing options...
Maurice Naggar Posted April 24, 2013 ID:673436 Share Posted April 24, 2013 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts