Windows system files reported as malware


  1. Posts : 23
    Windows 10 - Pro (20H2)
       #1

    Windows system files reported as malware


    Hi,

    I just updated my system to version 19042.844, and within Process Explorer I'm getting that one engine reports some Windows System files as malware on VirusTotal.com

    Can someone on this forum test this and give me feedback about this issue?

    Here is what I'm getting from Process Explorer:

    Windows system files reported as malware-1.jpg
    Windows system files reported as malware-2.jpg
    Windows system files reported as malware-3.png
      My Computer


  2. Posts : 2,555
    Windows 10 Pro 64bit
       #2

    As that isn’t a well known AV maker I suspect a false positive.
    Scan with Malwarebytes & tick scan for root kits, I bet nothing in that list is found.
    https://www.malwarebytes.com/
      My Computer


  3. Posts : 23
    Windows 10 - Pro (20H2)
    Thread Starter
       #3

    Bastet said:
    As that isn’t a well known AV maker I suspect a false positive.
    Scan with Malwarebytes & tick scan for root kits, I bet nothing in that list is found.
    https://www.malwarebytes.com/
    I was terrified when I saw this, so I performed a scan right away with MBAM, Hitman Pro, ZoneAlarm and AdwCleaner.

    Nothing came up in results.

    Can someone please check it this happening to everyone?
      My Computer


  4. Posts : 2,555
    Windows 10 Pro 64bit
       #4

    Which antivirus are you using? If Bkav Pro is its name then it’s a false positive. I’d recommend dumping it & using Defender.
    We’d have to purchase it & it may not be available or work outside of Vietnam.
      My Computer


  5. Posts : 18,034
    Win 10 Pro 64-bit v1909 - Build 18363 Custom ISO Install
       #5

    Hello @almirsahbaz,

    Did you look at this? => VirusTotal

    I hope this helps.
      My Computer


  6. Posts : 23
    Windows 10 - Pro (20H2)
    Thread Starter
       #6

    Bastet said:
    Which antivirus are you using? If Bkav Pro is its name then it’s a false positive. I’d recommend dumping it & using Defender.
    We’d have to purchase it & it may not be available or work outside of Vietnam.
    I'm using ZoneAlarm, but tonight when I performed regular check with Process Explorer, a find out that this strange Antivirus Engine on VirusTotal detects a bunch of Windows system files as Malware.
      My Computer


  7. Posts : 2,555
    Windows 10 Pro 64bit
       #7

    With Virustotal did you upload a file to their site for scanning?
    From where did you see these entries? On your own PC or on the Virustotal website? It looks like taskmanager. This will not show if a file is infected.
    Can you show the full page which is giving you the malware notification?
    It sounds like you’ve read that those entries are malware on a site but all are Microsoft files.
    On the screen cap it shows 1 AV program shows some of the files as malware but it also means 74 shows them as clean so this is a false positive.
      My Computer


  8. Posts : 23
    Windows 10 - Pro (20H2)
    Thread Starter
       #8

    Bastet said:
    With Virustotal did you upload a file to their site for scanning?
    From where did you see these entries? On your own PC or on the Virustotal website? It looks like taskmanager. This will not show if a file is infected.
    Can you show the full page which is giving you the malware notification?
    It sounds like you’ve read that those entries are malware on a site but all are Microsoft files.
    On the screen cap it shows 1 AV program shows some of the files as malware but it also means 74 shows them as clean so this is a false positive.
    This is definitely false positive from some lousy engine on VirusTotal.

    I started Process Explorer on my other PC, that I was not using for months, and same thing happened.

    Thank you for your answer, I was scared to death.
      My Computer


  9. Posts : 2,555
    Windows 10 Pro 64bit
       #9

    If you’re using that antivirus then I’d certainly not continue using it if it’s saying Microsoft files are malware.
    Keep Malwarebytes free as an on-demand scanner.

    You’re welcome. Glad to have allayed your fears.
      My Computer


  10. Posts : 196
    Windows 10
       #10

    Showed a few detections of Windows files on Process Explorer for me as well, a no-name AV with a false detection, just ignore it.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:07.
Find Us




Windows 10 Forums