Results 1 to 3 of 3

Thread: RuMSX possibly detected as Fake.MSAntivirus false positive

  1. #1
    Junior Member
    Join Date
    Dec 2009
    Posts
    2

    Default RuMSX possibly detected as Fake.MSAntivirus false positive

    Dear Sirs,

    Recently, I installed an MSX emulator called RuMSX from its official
    website:

    http://www.lexlechz.at/en/software/RuMSX.html

    After then at the first scan performed with SpyBot it alerted me that
    I was hit by Fake.MSAntivirus malware. Following the links in the registry
    I found that they pointed to RuMSX generated entries and found no evidence
    in my Program Files folder of the signatures of Fake.MSAntivirus like:

    <$PROGRAMFILES>\MSX\MSX.exe.

    It seems to me a false positive.

    I'm interested in Your opinion.

    Thanks in advance.

    Best regards.

    Bonarella.

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Hello,

    I cannot confirm the false positive you reported.

    The Emulator (version ) installs to:
    program files\Lex Lechz\RuMSX\
    and not
    program files\MSX\

    however the following registry key gets falsely detected:
    HKEY_LOCAL_MACHINE\Software\MSx

    this will be changed with the next detection update scheduled for Wednesday 2009-12-16.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Junior Member
    Join Date
    Dec 2009
    Posts
    2

    Default Confirm: It is exactly what happened on my computer

    Dear Yodama,

    maybe I was not clear in my previous post but what You wrote
    is exactly what happened on my computer: RuMSX was installed in
    in a given (by me) location like this:

    C:\Program Files\MSX\RuMSX

    (during installation I changed the default installation directory)

    and Spybot detected the generated registry key:

    HKEY_LOCAL_MACHINE\Software\MSX

    so all it happened suggests that it is a false positive generated
    by RuMSX.

    Thank You for the attention.

    Best regards.

    Bonarella.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •