Trojan horse in kernelxp.dll ?!

[Phenomic]

AVG is giving me virus alert in Win2K:

WINNT/system32/kernelxp.dll Trojan horse Crypt2.CEIE

Java/jv172w2k.cab:/KernelXP.dll Trojan horse Crypt2.CCBL

nvw2k26658d/KernelXP.dll Trojan horse Crypt2.CEIE

Any ideas?

[jaclaz]

Any ideas?

No "new" ones, always the same, old, ones check the file here:

https://www.virustotal.com/

And see what the "consensus" is, it won't be the first time that a tool detects a false positive, but better double check anyway.

Knowing which EXACT version and WHERE EXACTLY/HOW you got the file might also give some further (either reassuring or preoccupying ) insight on the probabilities it is actually a false positive or not.

jaclaz

[Phenomic]

It's version 5.1.2599.63 Windows 2000 XP API Wrapper, PFW/BlackWingCat. Strange thing is, I'm also running a virtual machine Win2k-UU and there is NO kernelxp.dll in the file system.

[tomasz86]

Very likely a false positive.

It's version 5.1.2599.63 Windows 2000 XP API Wrapper, PFW/BlackWingCat. Strange thing is, I'm also running a virtual machine Win2k-UU and there is NO kernelxp.dll in the file system.

In case of UURollup the kernel itself is modified so no need for any additional wrappers.