1 Reply Latest reply on Dec 7, 2010 1:30 PM by pammirab

    Possible False Positive - Artemis!C827E226BA5C


      File: trsrun-1_0-nq.exe
      Date: 4/14/2008 4:14 AM
      Size: 1,699 KB
      This file belongs to the Trinity Resource Kit (http://trinityhome.org)

        • 1. Re: Possible False Positive - Artemis!C827E226BA5C

          The Artemis database has been updated and the sample should no longer be detected within 30 minutes.


          As this is a remote assistance installer that drops pskill.exe which is an older SysInternals tool and WinVNC which is a remote admin tool, used legitimately, the only problem is the fact that malware can, and has, utilized this and similar tools to do bad stuff.


          Best Regards,

          Patty Ammirabile