Jump to content

smss32.exe and winlogon32.exe false positives


TheOtherGeek

Recommended Posts

Just an FYI regarding false positives I noted last week during malware removal practice. SMSS32.exe and WINLOGON32.exe both were flagged by MBAM as threats in c:\windows\system32. The files did not exist there even after turning on show hidden and show system files. The false positives were produced by the heuristics portion of the MBAM scan. Upon further investigation, I realized PCTools Threatfire had quarantined these two threats. When I ran the option to permanently delete these threats from Threatfire quarantine, the MBAM false positives went away and MBAM heuristics produced a clean scan. This report is for your information. I have no ongoing problem to resolve. Thank you.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.