Jump to content

Trojan horse in kernelxp.dll ?!


Recommended Posts


Any ideas?

No "new" ones, always the same, old, ones check the file here:

https://www.virustotal.com/

And see what the "consensus" is, it won't be the first time that a tool detects a false positive, but better double check anyway.

Knowing which EXACT version and WHERE EXACTLY/HOW you got the file might also give some further (either reassuring or preoccupying :ph34r:) insight on the probabilities it is actually a false positive or not.

jaclaz

Link to comment
Share on other sites

Very likely a false positive.

It's version 5.1.2599.63 Windows 2000 XP API Wrapper, PFW/BlackWingCat. Strange thing is, I'm also running a virtual machine Win2k-UU and there is NO kernelxp.dll in the file system.

In case of UURollup the kernel itself is modified so no need for any additional wrappers.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...