FakeAV.pov in AegisE5.dll

I hope this is OK but it is continuation of what I already posted at http://forums.whatthetech.com/index.php?showtopic=119106
to which Conspire very kindly responded.

Conspire, many thanks for getting back to me on this. Unfortunately due to time differences (it was overnight for me) and my not receiving an email letting me know that you had responded (possibly blocked by a spam filter, or my fault for not understanding how to set this up), I didn't get your reponse until the topic was closed.

You advised me that the DDS results log did not indicate the presence of malicious files as far as you could tell, and to scan the file c:\windows\system32\aegise5.dll using Virus Total.

I tried to do what you said, using Virus Total, but the aegise5.dll doesn't exist within c:\windows\system32\

The file that AVG pickled up and which I restored was c:\Programme Files\RALINK\Common\aegise5.dll
(Sorry, I should have said that in the first place)

There are further files of the same name in 3 of 5 folders within c:\Programme Files\RALINK\RT7X Wireless LAN Card\Installer\

I searched for further locations of file of this name, checking to search system folders and to search hidden files and folders, but these 4 above were all that were found.

I therefore ran Virus Total on all 4 instances of aegise5.dll, and all appear to be free of infection.

Results:

c:\Programme Files\RALINK\Common\aegise5.dll
http://www.virustotal.com/file-scan/report…bc25-1308651197

c:\Programme Files\RALINK\RT7X Wireless LAN Card\Installer\WIN2K\aegise5.dll
http://www.virustotal.com/file-scan/report…bc25-1308651570

c:\Programme Files\RALINK\RT7X Wireless LAN Card\Installer\WINX64\aegise5.dll
http://www.virustotal.com/file-scan/report…bc25-1308651859

c:\Programme Files\RALINK\RT7X Wireless LAN Card\Installer\WINXP\aegise5.dll
http://www.virustotal.com/file-scan/report…bc25-1308652056

Is there anything further that I need to do to be sure my system is clean of infection?

Hi, This seems to be a false positive detection. Basically your system wasn't infected, you already have a secured system security installed on the machine and always make sure you know what you are clicking. As I mentioned on the previous thread, I think you should put the detected files under exlcusion list to avoid similar problem in future. By the way, make sure that you hide your files and folders back.

Many thanks, Conspire. Thank you for reassuring me. Also Virus Total is a really useful tool to use, so thank you for telling me about that. I have changed the settings back for hiding the files and folders.

You're welcome If you still have any concerns or issues left, feel free to let me know. I will try my best to help you. Otherwise we will consider this as solved and close this topic.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.