C:\Windows\System32\atl.dll(Trojan.FakeMS.ED)

[gtt]

Hi Support

 

im getting the following on windows 11 when i run a scan on mbar antirootkit C:\Windows\System32\atl.dll(Trojan.FakeMS.ED) but after it detects it makes restore point and then reboot

when i run mbar again its still there

 

malwarebytes is not detecting it but mbar is please help

 

thanks

[Porthos]

4 minutes ago, gtt said:

Hi Support

 

im getting the following on windows 11 when i run a scan on mbar antirootkit C:\Windows\System32\atl.dll(Trojan.FakeMS.ED) but after it detects it makes restore point and then reboot

when i run mbar again its still there

 

malwarebytes is not detecting it but mbar is please help

 

thanks

It is a false positive. The stand-alone rootkit scanner is not supported any longer and has not been updated in a long time.

Do not use it.

[Porthos]

@gtt Other than that false detection, do you have a reason to think your computer has an issue? Or were you just scanning for the sake of scanning?

[bigretromike]

On 5/4/2024 at 10:38 PM, Porthos said:

It is a false positive. The stand-alone rootkit scanner is not supported any longer and has not been updated in a long time.

Do not use it.

I came here to thank you, I was getting same results. In my case nothing was found except ATL.dll and few regs related to it. To bad that information ain't added in download section. I did remove file but probably will get to restore it.

Thanks for info

[bigretromike]

Also which scanner should we use ?