#1  
Old 07-15-2007, 05:41 PM
testtoo testtoo is offline
Junior Member
 
Join Date: Jul 2007
Posts: 2
Default cyberhawk created mchInjDrv.sys

few days ago my avira catch a file name mchInjDrv.sys, and reported:

Virus or unwanted program 'RKit/Agent.GO [RKIT/Agent.GO]'
detected in file 'C:\WINDOWS\system32\drivers\mchInjDrv.sys.

i used gmer and finded it out, it was created by cyberhawk durring the windows startup. But it doesn't bother the cyberhawk that the Avira delete this file.

what is this?
Reply With Quote
  #2  
Old 07-15-2007, 07:44 PM
mjq424's Avatar
mjq424 mjq424 is offline
Moderator
Volunteer Guru
Subscriber
Moderator
 
Join Date: Feb 2007
Location: UK
Posts: 2,854
Default

Hi
This is the kernel driver for Cyberhawk. A false positive by Avira. This means that Cyberhawk wont be able to detect rootkits.
__________________
Regards,
Matt

PC Tools Community Forum Volunteer
Reply With Quote
  #3  
Old 07-16-2007, 12:52 AM
Wordward Wordward is offline
Enthusiast
Subscriber
 
Join Date: Jan 2007
Posts: 204
Default

I was getting the same thing from Avira with a-squared Anti-Malware installed as were others. It was being detected after reboot even if quarantined. I believe it has been reported as a false positive to Avira.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 05:52 AM.