Malware or not? sysproc64.sys

[Ratchetstrike]

Ok i ran malwarebytes and it says this

D:\Documents and Settings\LocalService\Application Data\sysproc64\sysproc32.sys (Trojan.Agent) -> No action taken.

D:\WINDOWS\system32\sysproc64\sysproc32.sys (Trojan.Agent) -> No action taken.

D:\WINDOWS\system32\sysproc64\sysproc86.sys (Trojan.Agent) -> No action taken.

ive opened up the folder sysproc64 and inside is two files which are blue in text

sysproc32.sys is 0kb and sysproc86.sys is 107kb

i've uploaded them to virus total and jotti and they have came back 0% on both scanners

are these actually malware or needed system files?

doesnt sysproc stand for system processor

[Blaze]

Hi, if you think this is a false positive you may post here:

http://forums.malwarebytes.org/index.php?showforum=42

Include the VirusTotal reports. Also the Experts will probably ask for a sample of these files.

Hope this helps

[TonyKlein]

Here's some reading:

http://www.avira.com/en/threats/section/fu...y.zbot.dfr.html

http://www.sophos.com/security/analyses/vi...l?_log_from=rss

http://www.fortiguard.com/encyclopedia/vir...33;tr.dldr.html

In short, this is definitely not a False Positive, prolly a new variant...

[screen317]

Hi and welcome to Malwarebytes.

Do you still need help?

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!