Hi after an update to S&D I get a report of Win32.SonyAgent.NFP I can't find any info about this and what it does/how it does it. It seems to be new to Spybot scans and others. Normally geek forums etc have a lot about new malware so Iam puzzled.

It consists of (on mine anyway) an exe, 2 dlls and 2 reg entries
C:\WINDOWS\system 32\drivers\npf.sys
C:\WINDOWS\system 32\Packet.dll
C:\WINDOWS\system 32\wpcap.dll
then the reg entries in
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NPF
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\NPF

It rebuilds at next boot after S&D removes it (after removal npf.sys stays, I can't find wpcap.dll and Packet .dll but there is always a Packet.dll_old so that gets reborn at boot I guess)

OK so also why I am puzzled is that after trying to replace the drivers I wound up with a non-booter. I do keep a clone of "C" unplugged and redone every few weeks when everything is running OK. I swapped HDs and there is the SonyAgent (but that was from 5 weeks ago and Spybot, Malwarebytes et al never found it then. it must have been around a while. Also the only people who seem to be connected with it are CACE Technologies inc. who LOOK legit. Hmmm! any more information would be appreciated.