Fixed: WinSys2.exe - False Positiv - MSI Graphiccard Tool

[redlabour]

Hi,

Spybot S&D identifies

WinSys2.exe

as a Trojan.

Win32.Agent.ws: [SBI $FA557EB3] Ausführbare Datei (Datei, nothing done)
C:\Windows\System32\winsys2.exe
Properties.size=217088
Properties.md5=246ED5328F940E4FDAAB0B2FC987DA01
Properties.filedate=1159879064
Properties.filedatetext=2006-10-03 14:37:44

In Fact this is only a Excecutable of MSI Graphiccard Tools.

Please fix this.

 

[Yodama]

hello,

there is a winsys2.exe for overclocking graphic cards, however that file is supposed to have properties that identifies it so it can be excluded from detection. The file detected on your computer does not appear to have the properties of the overclocking exe. To confirm if this is a false positive or a real threat please email your winsys2.exe to detections@spybot.info with a reference to this thread.

You can also send your email in German.

 

[Yodama]

I can now confirm this false positive. It is another version of the overclocking tool having entries like "TODO: <Comany Name>" in the version information.

If you have this false positive please check if there is a newer version of the graphic card software is available.
If the TeaTimer and/or Spybot S&D flag the file select to ignore/allow the file in the future.

A detection fix will be available with the next detection update.