Jump to content

accwiz and ctfmon possible false positive?


Recommended Posts

Getting these two files to pop up on two seperate pc's as infected, scanned with a couple of other scanners and also virustotal, only malwarebytes came back with anything. Hoping this is just a false positive because if both are infected I may have a big problem on my hands.

Malwarebytes Anti-Malware

Database version: v2014.03.05.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
pc2 :: PC2-B709060FB47 [administrator]

3/5/2014 4:21:25 AM
MBAM-log-2014-03-05 (04-40-48).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 287973
Time elapsed: 16 minute(s), 22 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe (Trojan.FakeMS) -> No action taken. [74348a755228b3832caf366d1ce5c63a]
C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe (Trojan.FakeMS) -> No action taken. [02a6bd42a7d35fd7f5e7376c4bb659a7]



MBAM-log-2014-03-05 (04-40-48).txt

Link to post
Share on other sites

I had the same 2 files detected this morning in the same servicepack uninstall folder as reported above: accwiz.exe and ctfmon.exe.  But my MD5 hashes are different than the ones shown in the original post above.   Perhaps I have a different file version.   But I guess since it's the same 2 filenames and location, that it is likely being detected for the same reason.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.