Jump to content

Win64/GenKryptik.GNVE


Go to solution Solved by Marcos,

Recommended Posts

Hello,

Today  on our computers Eset  detected Win64/GenKryptik.GNVE in a  file/application  which was already used for some weeks (ovpnconnecter.exe - part of Open VPN)

Is it a false positive ?

Here the hash 48937C35DA724A6806A180AF241910E4889A0FB5

 

Link to comment
Share on other sites

  • Administrators

Attachments uploaded here are accessible only by the ESET staff.  I would say they don't contain any confidential data anyways. Alternatively you can upload the archive to OneDriver, Google Drive, Dropbox, etc. and drop me a private message with a download link.

Link to comment
Share on other sites

  • Administrators

Where did you see the detection? The Detections log is empty and there are no on-demand scan logs either.

Link to comment
Share on other sites

  • Administrators

The logs seem to be same as before, also the time is same.

collector_log.txt
[13:37:47.335] WARNING: Not running under administrator account.

Nevertheless, I see the file in quarantine which should be enough for analysis. Will keep you posted.

Link to comment
Share on other sites

  • Administrators
  • Solution

It was a false positive, the detection was removed an hour ago and a new update is being built as we speak.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...