Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Avira detection
05-05-2011, 09:32 PM
Post: #1
Avira detection
An avira window just popped up that says it's detected 'SPR/Tool.Ursnif.A.3' in 'winlogon.exe'. Obviously I don't want to move this file to quarantine but what is it? Is this file associated with antiwpa?
Find all posts by this user
Quote this message in a reply
05-06-2011, 02:38 PM (This post was last modified: 05-06-2011 02:39 PM by Cyko.)
Post: #2
RE: Avira detection
Hi,

Could be a False Positive - but to be certain submit the suspected file only via the following form:

http://analysis.avira.com/samples/

Ensure that you select the Suspected False Positive (Not Malware) under File type.

Also ensure within the URL field you put N/A.

You should then hopefully receive an email back from Avira within 48 hours telling you whether its a False Postive or not.

Let me know how that goes.
Find all posts by this user
Quote this message in a reply
05-06-2011, 03:00 PM
Post: #3
RE: Avira detection
Hi
Do you mean I should send 'winlogon.exe' to them?
Thanks.
Find all posts by this user
Quote this message in a reply
05-06-2011, 03:45 PM
Post: #4
RE: Avira detection
(05-06-2011 03:00 PM)mordredking Wrote:  Hi
Do you mean I should send 'winlogon.exe' to them?
Thanks.

Yes
Find all posts by this user
Quote this message in a reply
05-06-2011, 05:43 PM
Post: #5
RE: Avira detection
Ok, thanks for the help Smile
Find all posts by this user
Quote this message in a reply
05-06-2011, 09:11 PM
Post: #6
RE: Avira detection
If winlogon.exe is located at %windir%\system32\ then its likely to be a false positive.

Regards,
NewEraCracker
Find all posts by this user
Quote this message in a reply
05-07-2011, 06:27 PM
Post: #7
RE: Avira detection
Cool, thanks.
Is there a way to get Avira to ignore it permanently? It detects it every time I boot which gets annoying.
Find all posts by this user
Quote this message in a reply
05-09-2011, 04:44 PM
Post: #8
RE: Avira detection
(05-07-2011 06:27 PM)mordredking Wrote:  Cool, thanks.
Is there a way to get Avira to ignore it permanently? It detects it every time I boot which gets annoying.

Next time it pops up take a screenshot and reply with it.
Find all posts by this user
Quote this message in a reply
08-01-2012, 12:03 PM
Post: #9
RE: Avira detection
Yes Detect Trojaner
Find all posts by this user
Quote this message in a reply
10-17-2012, 08:22 PM
Post: #10
RE: Avira detection
Thanks for the help.
Indeed Kaspersky detected a trojan.

« Knowledge is good only if it is shared. »
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication