Jump to content

Masamunnex

Members
 View Profile  See their activity

  • Posts

    51

  • Joined

  • Last visited

 Content Type 

Posts posted by Masamunnex

    FP Win32/AtlasVPN.A PUA

    in Malware Finding and Cleaning

    Posted

    Just now, Marcos said:

    Yes, it was FP. A new engine update is being worked on which will have the detection fixed.

    You can create a temporary exclusion and restore the files from quarantine.

    hey i also posted a topic about this but it seems that the file path on my machine is different, looks like its going to a gaming service from microsoft, care to also take a look ?

    FP Win32/AtlasVPN.A PUA

    in Malware Finding and Cleaning

    Posted

    13 minutes ago, Gregecslo said:

    Hello.

    Possible FP: 

    Win32/AtlasVPN.A    Potentially unwanted application    file://C:\program files\dotnet\packs\microsoft.netcore.app.host.win-x64\5.0.10\runtimes\win-x64\native\apphost.exe    16e5ebf8a2ae6ed07892c6d318fcb953c8d2bca7    124416    January 27, 2022 08:07:38    1    
Win32/AtlasVPN.A    Potentially unwanted application    file://C:\program files\dotnet\packs\microsoft.netcore.app.host.win-x64\5.0.12\runtimes\win-x64\native\apphost.exe    2bb7aae7671a506267f4ec698199c447c1ea3ba8    124416    January 27, 2022 08:07:08    1    
Win32/AtlasVPN.A    Potentially unwanted application    file://C:\program files\dotnet\sdk\5.0.303\apphosttemplate\apphost.exe                                                5ff2eadcf444f245d71ae0501fddc5c921967433    124416    January 27, 2022 08:07:08    1    
Win32/AtlasVPN.A    Potentially unwanted application    file://C:\program files\dotnet\sdk\5.0.403\apphosttemplate\apphost.exe                                                2bb7aae7671a506267f4ec698199c447c1ea3ba8    124416    January 27, 2022 08:07:08    1    
Win32/AtlasVPN.A    Potentially unwanted application    file://C:\program files\dotnet\packs\microsoft.netcore.app.host.win-x64\5.0.9\runtimes\win-x64\native\apphost.exe    5ff2eadcf444f245d71ae0501fddc5c921967433    124416    January 27, 2022 08:07:08    1

    On VT only ESET detects it...

    hey i just posted a topic about this too, i have getting a PUA msg about this win32/atlasvpn.a i did not download any atlasvpn or anything, any idea whats this about ?

    Eset detected steelseries as a virus

    in Malware Finding and Cleaning

    Posted

    2 minutes ago, Marcos said:

    Thanks, it appears to be FP made by Augur the machine-learning system which blocked the file in LiveGrid. The file has now been removed from the blacklist. We're investigating why it happened to prevent such FP in the future.

    Great to hear that Marcos, is it safe to restore the file to its original location ?

    Another question if you will, if Eset blocked a site by internal blacklist, that means my PC is safe right ? Eset blocked the attemp to access that site in the first place ?

    Eset detected steelseries as a virus

    in Malware Finding and Cleaning

    Posted · Edited by Masamunnex

    3 minutes ago, Marcos said:

    Couldn't it be that the files were detected by the on-demand or startup scanner? Could you upload the file that was detected? If detected by real-time protection, pause it temporarily while you upload the file (compress it into a zip or rar archive, if possible). With ESET Log Collector logs we would have all necessary information at once.

    The file was detected by an on-demand scan to be honest, the file is currently in quarantine, do i need to restore it to upload it ?

    Eset detected steelseries as a virus

    in Malware Finding and Cleaning

    Posted

    So for some reason Eset detected SteelSeries software as a virus and i have no idea why, iv had the software since day 1 with eset and only now it detected it as a virus

    C:\Documents and Settings\All Users\SteelSeries\SteelSeries Engine 3\engineApps\system-stats\SysStatsGo.dll it says "suspicious file"

    is there any reason it started now to detect it ? i need to mention i didnt re-download this program it was downloaded from the official site 2 years ago

    Eset blocked twitch ?

    in Malware Finding and Cleaning

    Posted

    9 minutes ago, Marcos said:

    The FP will be fixed in a few minutes. The IP address has been blocked since 2018.

    If you need another Log Time;URL;Status;Application;User;IP address;SHA1
    02-May-20 8:05:18 PM;https://cognito-identity.us-east-1.amazonaws.com;Blocked by PUA blacklist;C:\Program Files (x86)\Google\Chrome\Application\chrome.exe;DESKTOP-OJGALTK\freec;52.206.238.184;4B6CB3A0794BEF967F8A5F593239446FA28EA74D

    Eset blocked twitch ?

    in Malware Finding and Cleaning

    Posted · Edited by Masamunnex

    7 minutes ago, itman said:

    Open Eset GUI. Select Tools -> More Tools - Log Files.

    1 hour ago, Marcos said:

    Please post the appropriate record from the Filtered websites or Detection log.

    do you mean to copy the PUA log ? does it have any personal information ?

×
×
  • Create New...