Chief Delphi

Chief Delphi (http://www.chiefdelphi.com/forums/index.php)
-   General Forum (http://www.chiefdelphi.com/forums/forumdisplay.php?f=16)
-   -   Killbill.exe found in FIRST USB (http://www.chiefdelphi.com/forums/showthread.php?t=88519)

elbuo 09-01-2011 11:33

Killbill.exe found in FIRST USB
 
Before installing the update in our classmate we ran a scan over the USB drive with Microsoft Security Essentials and it actually reported a virus.

Details below


Does anyone have a similar issue?

Bochek 09-01-2011 11:37

Re: Killbill.exe found in FIRST USB
 
what year classmate do you have? was this the image for the 2010 classmate or for the 2011 classmate?

elbuo 09-01-2011 11:39

Re: Killbill.exe found in FIRST USB
 
2010

Bochek 09-01-2011 11:41

Re: Killbill.exe found in FIRST USB
 
We are currently Scanning ours, will get back to you in a bit.

Edit: Nothing found using AVG Free.

iblis432 09-01-2011 12:12

Re: Killbill.exe found in FIRST USB
 
Usually if something edits another program, virus scanners see it as a trojan even if it isn't. An image could easily be considered a trojan because it edits the code of other programs. That may be what the issue is. Unless you have plugged the flashdrive into something you aren't supposed to, the flashdrive should be completely safe. I have seen plenty of clean files pop up as 'trojans' to virus scanners.

davidthefat 09-01-2011 12:12

Re: Killbill.exe found in FIRST USB
 
That might be the executable file that modifies the registries and whatnot to allow for that driver station to work. They have to remove all the menus and deny running other programs in driver mode.

Because Windows Essentials picked it up and AVG did not, I can adduce that my statement is true. The Essentials are looking for files that will modify the OS in anyway and call it a trojan.

Erik Huang 09-01-2011 18:13

Re: Killbill.exe found in FIRST USB
 
well then why would it be called killbill.exe? i don't think it's a FIRST easter egg...

Vikesrock 09-01-2011 18:18

Re: Killbill.exe found in FIRST USB
 
Some digging on Google suggests that this is a false positive and that the file is related to Webcam drivers. I'm not sure why the file is named the way it is, but it does not appear to be an actual trojan or virus.

NetPlanet 14-01-2011 23:04

Re: Killbill.exe found in FIRST USB
 
I just finished installing AVG free (not the trial version that comes with the update after re-imaging the 2010 classmate) and it detected and quarantined this exact file somewhere on the classmate itself after a scan.

For a false positive, why the menacing name?

Team1559is1337 15-01-2011 09:31

Re: Killbill.exe found in FIRST USB
 
Hey, so im just wondering why it says 1/4/1980, jw.

1 Winged Angel 15-01-2011 16:09

Re: Killbill.exe found in FIRST USB
 
You should scan with Malwarebytes. Tends to be more effective than AVG Free in scanning files at times.


All times are GMT -5. The time now is 08:44.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Copyright © Chief Delphi