Trojan.Skynet C:\Windows\system32\install\Explorer.exe

[xdigital]

Updated to ver 2.00 yesterday

This morning I got a report

 

Backdoor.Agent.PGen, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN|Policies, C:\Windows\system32\install\Explorer.exe, , 

Trojan.SkyNet, C:\Windows\SysWOW64\install\Explorer.exe, , [66759b6c7803f046b261ad03b44edd23], 

 

Link on TotalVirus

https://www.virustotal.com/en/file/6df94b7fa33f1b87142adc39b3db0613fc520d9e7a5fd6a5301dd7f51f8d0386/analysis/1395847053/

 

Please check. Thank

MalwareBytesReport03262014.xml

[miekiemoes]

Hi,

 

This doesn't look like a false positive though - there's no reason at all that explorer.exe runs from C:\Windows\system32\install\Explorer.exe via a startup key on top that is a policies run key.

It's really safe to have mbam remove this one.