Software feedback > RogueKiller

Detecting Deleted File?

(1/3) > >>

BaggotMaggot:
Hi,

I've ran many anti-malware software like Hitman Pro, Malwarebytes, ESET, Windows Defender, and MSERT. A while ago I found a malware file called "System.exe" inside the Local/Temp folder and I deleted it.

Today, I ran RogueKiller and it detected that same "System.exe" file that I should've deleted a while ago. RogueKiller detected this, but when I tried actually finding it's file location manually, it was no where to be found. I've set my computer up so that I should be able to see all hidden files as well, so I shouldn't have been able to miss it. The other antiviruses I've ran didn't detect it a second time after I already deleted it so I think it should have already been dealt with. Any ideas if this is a false positive? For what it's worth, after I deleted the file using RogueKiller, when I ran it again, it didn't detect it.

To summarize in order of what I did:
I ran Hitman Pro, Malwarebytes, ESET, Windows Defender, and MSERT and it detected and deleted "System.exe" in Local/Temp/ (and I could actually locate and find this file).
I ran Hitman Pro, Malwarebytes, ESET, Windows Defender, and MSERT again, and nothing was detected.
A few week pass
I run the above again and nothing is detected once more.
I then ran RogueKiller, and it detected "System.exe", claiming that it was in Local/Temp/ like last time, but I could not find anything in local temp this time.

Do you guys have any ideas why RogueKiller detected an already-deleted file the first time? Was it perhaps a false positive? Thank you!

Curson:
Hi BaggotMaggot,

Welcome to Adlice.com Forum.
Could you please attach RogueKiller scan report with your next reply ?

Regards.

BaggotMaggot:
Hi, here's the scan report

BaggotMaggot:
and the delete report

Curson:
Hi BaggotMaggot,

Please download SystemLook (x64) and save it to your desktop.
[*]Double-click SystemLook_X64.exe to run it.
[*]Copy the content of the following codebox into the main textfield:
[/list]
--- Code: ---:file
C:\Users\AT_ST\AppData\Local\Temp\System.exe
--- End code ---
[*]Click the Look button to start the scan.
[*]When finished, a notepad window will open with the results of the scan. Please attach this log in your next reply.
[/list]Note: The log can also be found on your Desktop entitled SystemLook.txt

Regards.

Navigation

[0] Message Index

[#] Next page