Fixed: MSI drivers misindentified as trojan

C

cvalde

New member
Hello, I have Windows XP SP3 with an NVIDIA GeForce 9500 GT based MSI video card. MSI includes some extra programs (compared to a bare NVidia driver package). In this case, it's
..\system32\winsys2.exe
that's related to MSI overclocking for the video card, but after updating Spybot's detection files, a manual scan shows:

06.09.2009 00:26:17 - ##### check started #####
06.09.2009 00:26:17 - ### Version: 1.6.2
06.09.2009 00:26:17 - ### Date: 06-09-2009 0:26:17
06.09.2009 00:26:19 - ##### checking bots #####
06.09.2009 00:26:45 - ##### check started #####
06.09.2009 00:26:45 - ### Version: 1.6.2
06.09.2009 00:26:45 - ### Date: 06-09-2009 0:26:45
06.09.2009 00:26:47 - ##### checking bots #####
06.09.2009 00:40:19 - found: Win32.Agent.ws Autorun settings (WinSys2)
06.09.2009 00:40:19 - found: Win32.Agent.ws Program file
06.09.2009 00:41:14 - ##### check finished #####

There's indeed a trojan that goes by the same name, but Spybot is the only one that panics. Neither Outpost's scanner nor PrevX nor AdAware flag the file as suspicious.
 
Thank you for reporting this issue.
A correction of the detection rules will be released on Wednesday 2009-09-09.
 
You must log in or register to reply here.
Back
Top