exe flagged as Win64/Agent.EHX trojan

[Guest Abe]

Eset startup scanner flagged important executables as a Win64/Agent.EHX trojan and deleted them. 

Reinstalled software exes and reran scan. Files were not deleted. 

Can you provide more information on this type of behavior and how exe get flag as Win64/Agent.EHX trojan   

[Marcos 5,243]

As dar as I recall it was an FP that was fixed some days ago.

[Guest Jaco]

Are you able to clarify this a bit more? 

Does it have to do with unsigned executables? Can we assume that this is a onetime error by Eset?

 

[Marcos 5,243]

The file was a false positive and is no longer detected. All antivirus vendors trigger more or less false positives but ESET is known for having only very few FPs.

[itman 1,743]

On 8/14/2024 at 1:25 PM, Guest Abe said:

Eset startup scanner flagged important executables as a Win64/Agent.EHX trojan and deleted them. 

Reinstalled software exes and reran scan. Files were not deleted. 

Reviewing a CrowdStike analysis of the app: https://hybrid-analysis.com/sample/b9c2fce587200c78d6bae57ee2d74d307139a8f43e8c7b1f265ffafaa7da088b , it was a particular installer that was flagged as malicious. I assumed this what might have influenced Eset original malicious detection of the app.