PDA

View Full Version : cyberhawk created mchInjDrv.sys



testtoo
07-15-2007, 06:41 PM
few days ago my avira catch a file name mchInjDrv.sys, and reported:

Virus or unwanted program 'RKit/Agent.GO [RKIT/Agent.GO]'
detected in file 'C:\WINDOWS\system32\drivers\mchInjDrv.sys.

i used gmer and finded it out, it was created by cyberhawk durring the windows startup. But it doesn't bother the cyberhawk that the Avira delete this file.

what is this?

mjq424
07-15-2007, 08:44 PM
Hi
This is the kernel driver for Cyberhawk. A false positive by Avira. This means that Cyberhawk wont be able to detect rootkits.

Wordward
07-16-2007, 01:52 AM
I was getting the same thing from Avira with a-squared Anti-Malware installed as were others. It was being detected after reboot even if quarantined. I believe it has been reported as a false positive to Avira.