Trendmicro housecall

#1 signal-vol Members 3 posts OFFLINE Local time:11:16 PM Posted 29 April 2013 - 01:47 PM I ran a scan on RogueKiller.exe (32bit) and RogueKillerX64.exe (64bit) on VirusTotal. Each was reported to have virus.For RogueKiller.exe TrendMicro-HouseCall reported TROJ_GEN.F47V0319And for RogueKillerX64.exe McAfee-GW-Edition reported Heuristic.BehavesLike.Win32.Suspicious-BAY.GDoes truly know if these determinations are false positives?ThanksSignal-Vol Back to top"> Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 noknojon noknojon Gender:Not Telling Local time:01:16 PM Posted 29 April 2013 - 05:31 PM Hello -Can you Copy / Paste your results from Virus Total - Most likely a F/Pos as Trend will pick up many tools as infections.Re-run it on Jotti or another similar checking site -I just ran it and had no reaction -Thank You - Back to top"> Back to top #3 signal-vol signal-vol Topic Starter Members 3 posts OFFLINE Local time:11:16 PM Posted 30 April 2013 - 07:45 PM I downloaded the files from found a virus for the 32 bit and suspicious for the 64 bit.Jotti found Win32:packer for the 32 bit and clean for the 64 bit (didn't post)The Jotti post is converted to words by Notebook ++ because I can't post pics on the board.It is interesting that on VirusTotal Trend Micro HouseCall found a virus and on Jotti Trend Micro Antivirus did not.I appreciate the help.VirusTotal SHA256: 48ef0b014188d44411c32617ce62840e8ee86367dd75c3a9a6094e20e882da9e File name: RogueKiller Detection ratio: 1 / 46 Analysis date: 2013-04-30 20:31:07 UTC ( 0 minutes ago ) More details Antivirus Result Update Agnitum 20130430 AhnLab-V3 20130430 AntiVir 20130430 Antiy-AVL 20130430 Avast 20130430 AVG 20130430 BitDefender 20130430 ByteHero 20130430 CAT-QuickHeal 20130430 ClamAV 20130430 Commtouch 20130430 Comodo 20130430 DrWeb 20130430 Emsisoft 20130430 eSafe 20130423 ESET-NOD32 20130430 F-Prot 20130430 F-Secure 20130430 Fortinet 20130430 GData 20130430 Ikarus 20130430 Jiangmin 20130430 K7AntiVirus 20130430 K7GW 20130430 Kaspersky 20130430 Kingsoft 20130422 Malwarebytes 20130430 McAfee 20130430 McAfee-GW-Edition 20130430 Microsoft 20130430 MicroWorld-eScan 20130430 NANO-Antivirus 20130430 Norman 20130430 nProtect 20130430 Panda 20130430 PCTools 20130430 Sophos 20130430 SUPERAntiSpyware 20130430 Symantec 20130430 TheHacker 20130430 TotalDefense 20130430 TrendMicro 20130430 TrendMicro-HouseCall TROJ_GEN.F47V0319 20130430 VBA32 20130430 VIPRE 20130430 ViRobot 20130430 VirusTotal SHA256: dee73e429468ede4f4f918ad62116bab690e82f8228c610ca75e86de88495cfa File name: RogueKiller Detection ratio: 1 /

What is hcserv.exe doing on my computer? hcserv.exe is a process belonging to Trend HouseCall v5.61.0 from Trend Micro Inc.. Non-system processes like hcserv.exe originate from software you installed on your system. Since most applications store data on your hard disk and in your system's registry, it is likely that your computer has suffered fragmentation and accumulated invalid entries which can affect your PC's performance. In Windows Task Manager, you can see what CPU, memory, disk and network utilization is causing the hcserv process. To access the Task Manager, hold down the Ctrl + Shift + Esc keys at the same time. These three buttons are located on the far left of your keyboard. hcserv.exe The hcserv.exe is an executable file on your computer's hard drive. This file contains machine code. If you start the software Trend HouseCall v5.61.0 on your PC, the commands contained in hcserv.exe will be executed on your PC. For this purpose, the file is loaded into the main memory (RAM) and runs there as a hcserv process (also called a task). Is hcserv.exe harmful? hcserv.exe has not been assigned a security rating yet.The hcserv.exe file should be located in the folder C:\Program Files\trendmicro\damage cleanup server. Otherwise it could be a Trojan. Can I stop or remove hcserv.exe? Many non-system processes that are running can be stopped because they are not involved in running your operating system. hcserv.exe is used by 'Trend HouseCall v5.61.0'. This is an application created by 'Trend Micro Inc.'.If you no longer

46 Analysis date: 2013-04-30 20:41:02 UTC ( 0 minutes ago ) More details Antivirus Result Update Agnitum 20130430 AhnLab-V3 20130430 AntiVir 20130430 Antiy-AVL 20130430 Avast 20130430 AVG 20130430 BitDefender 20130430 ByteHero 20130425 CAT-QuickHeal 20130430 ClamAV 20130430 Commtouch 20130430 Comodo 20130430 DrWeb 20130430 Emsisoft 20130430 eSafe 20130423 ESET-NOD32 20130430 F-Prot 20130430 F-Secure 20130430 Fortinet 20130430 GData 20130430 Ikarus 20130430 Jiangmin 20130430 K7AntiVirus 20130430 K7GW 20130430 Kaspersky 20130430 Kingsoft 20130422 Malwarebytes 20130430 McAfee 20130430 McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.G 20130430 Microsoft 20130430 MicroWorld-eScan 20130430 NANO-Antivirus 20130430 Norman 20130430 nProtect 20130430 Panda 20130430 PCTools 20130430 Sophos 20130430 SUPERAntiSpyware 20130430 Symantec 20130430 TheHacker 20130430 TotalDefense 20130430 TrendMicro 20130430 TrendMicro-HouseCall 20130430 VBA32 20130430 VIPRE 20130430 ViRobot 20130430 Jotti's malware scanFilename: RogueKiller.exeStatus: Scan finished. 1 out of 22 scanners reported malware.Scan taken on: Tue 30 Apr 2013 22:47:32 (CET) PermalinkAdditional infoFile size: 816128 bytesFiletype: PE32 executable for MS Windows (GUI) Intel 80386 32-bitMD5: 1cd51ae9bceac9f0cee159821a1817b8SHA1: 2937f79b72c7bcf74966ee7359b46bcd21b38898Packer (Avast): UPXPacker (Drweb): UPX, BINARYRESPacker (Kaspersky): UPXScanners[ArcaVir] 2013-04-30 Found nothing[Frisk F-Prot Antivirus] 2013-04-30 Found nothing[Avast! antivirus] 2013-04-30 Found nothing[F-Secure Anti-Virus] 2013-04-30 Found nothing[Grisoft AVG Anti-Virus] 2013-04-30 Found nothing[G DATA]2013-04-30 Found nothing[Avira AntiVir] 2013-04-30 Found nothing[Ikarus] 2013-04-30 Found nothing[Softwin BitDefender] 2013-04-30 Found nothing[Kaspersky Anti-Virus] 2013-04-30 Found nothing[ClamAV]2013-04-30 PUA.Win32.Packer.Upx-28[Panda Antivirus] 2013-04-30 Found nothing[CPsecure]2013-04-28 Found nothing[Quick Heal] 2013-04-30 Found nothing[Dr.Web] 2013-04-30 Found nothing[Sophos] 2013-04-30 Found nothing[MicroWorld eScan]2013-04-30 Found nothing[Trend Micro Antivirus] 2013-04-29 Found nothing[ESET] 2013-04-30 Found nothing[VirusBlokAda VBA32] 2013-04-30 Found nothing[Fortinet] 2013-04-30 Found nothing[VirusBuster] 2013-04-30 Found nothingScan a file - Hash search - Frequently Asked Questions - Privacy policy© 2004-2012 Jotti Back to top"> Back to top #4 signal-vol signal-vol Topic Starter Members 3 posts OFFLINE Local time:11:16 PM Posted 30 April 2013 - 08:37 PM So much for copying from VirusTotal. Below is via Notepad++VirusTotalSHA256: 48ef0b014188d44411c32617ce62840e8ee86367dd75c3a9a6094e20e882da9eFile name: RogueKillerDetection ratio: 1 / 46Analysis date: 2013-05-01 00:47:12 UTC ( 0 minutes ago )Antivirus Result UpdateAgnitum 20130430AhnLab-V3 20130430AntiVir 20130430Antiy-AVL 20130430Avast 20130501AVG 20130430BitDefender 20130501ByteHero 20130430CAT-QuickHeal 20130430ClamAV 20130430Commtouch 20130501Comodo 20130430DrWeb 20130501Emsisoft 20130501eSafe 20130423ESET-NOD32 20130430F-Prot 20130501F-Secure 20130501Fortinet 20130501GData 20130501Ikarus 20130501Jiangmin 20130430K7AntiVirus 20130430K7GW 20130430Kaspersky 20130430Kingsoft 20130422Malwarebytes 20130501McAfee 20130501McAfee-GW-Edition 20130430Microsoft 20130501MicroWorld-eScan 20130501NANO-Antivirus 20130430Norman 20130430nProtect 20130430Panda 20130430PCTools 20130430Sophos 20130501SUPERAntiSpyware 20130501Symantec 20130501TheHacker 20130430TotalDefense 20130501TrendMicro 20130501TrendMicro-HouseCall TROJ_GEN.F47V0319 20130501VBA32 20130430VIPRE 20130501ViRobot 20130430Blog | Twitter | contact@virustotal.com | Google

If I were sitting in front of your computer I could think of many things to check, but since I am not, I only have a few shots in the dark.First, let's try to clear the Flash Player's own temporary files. This is easiest done by using CCleaner. Download, install, and run it. On tab Applications, Multimedia, check 'Adobe Flash Player'. Before you click 'Run Cleaner' make sure that Cookies are unchecked under Windows (Internet Explorer) and Applications (whatever other browsers you have).Now click 'Run Cleaner'; this may run for a few minutes because it does a lot of cleaning. Do not run the Registry cleaner!Did this make any difference - try to install Flash Player again.Next thing I would try is to run CHKDSK - Start -> Run -> cmd -> chkdsk /fYou may need to reboot to get CHKDSK to run.Last thing for today, check your system for malware that is not covered by McAfee (what product is it exactly, VirusScan?). Run a full system scan with Trendmicro Housecall - it will show you if you have any malware infection on your system that could be responsible for your Flash Player installation problem.Sorry, I will be off for a few days, but I may check in here sometimes.

Specified in the "SEG_WhiteListProcNum" key. [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\ABC] Name: ProcessImageName Type: REG_SZ Data: ABC.exe [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\DEF] Name: ProcessImageName Type: REG_SZ Data: DEF.exe For Windows 8 desktops and higher and Windows 2012 servers and higher: [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList] SEG_WhiteListProcNum=x SEG_WhiteListProc0=ABC.exe SEG_WhiteListProc1=DEF.exe SEG_WhiteListProc9=XYZ.exe Where x is the number of approved processes. The maximum is 10. The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key. [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\ABC] Name: ProcessImageName Type: REG_SZ Data: ABC.exe [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\DEF] Name: ProcessImageName Type: REG_SZ Data: DEF.exe Registry keys installed in OfficeScan 11.0 Service Pack 1 (SP1) For machines before Windows 7 desktops and Windows 2012 Servers: [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList] SEG_WhiteListProcNum=x SEG_WhiteListProc0=ABC.exe SEG_WhiteListProc1=DEF.exe SEG_WhiteListProc9=XYZ.exe Where x is the number of approved processes. The maximum is 10. The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key. [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\ABC] Name: ProcessImageName Type: REG_SZ Data: ABC.exe [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\DEF] Name: ProcessImageName Type: REG_SZ Data: DEF.exe For Windows 7 desktops and higher and Windows 2012 servers and higher: [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList] SEG_WhiteListProcNum=x SEG_WhiteListProc0=ABC.exe SEG_WhiteListProc1=DEF.exe SEG_WhiteListProc9=XYZ.exe Where x is the number of approved processes. The maximum is 10. The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key. [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\ABC] Name: ProcessImageName Type: REG_SZ Data: ABC.exe [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\DEF] Name: ProcessImageName Type: REG_SZ Data: DEF.exe Registry keys installed in OfficeScan XGFor machines before Windows 7 desktops and Windows 2008 R2 Servers: [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList] SEG_WhiteListProcNum=x SEG_WhiteListProc0=ABC.exe SEG_WhiteListProc1=DEF.exe SEG_WhiteListProc9=XYZ.exe Where x is the number of approved processes. The maximum is 10. The following installed subkeys are based on

BrightnessTray es una sencilla plataforma que te ofrece la posibilidad de controlar el brillo del monitor mediante un botón deslizante en la Bandeja del sistema. Es tan fácil que podrás cambiar el brillo de la pantalla moviendo la rueda del ratón.Pero la utilidad no solo ajusta el brillo de la pantalla, también viene con unas características interesantes como apagar el monitor, comprobar el nivel de brillo de la pantalla y poner en estado de suspensión el sistema.Antes de comenzar a explicarte el funcionamiento del entorno, te comentamos que hemos probado el programa en un ordenador portátil y todo ha funcionado a la perfección. Pero en comentarios en foros encontramos que algunos usuarios no han podido utilizar la herramienta en ordenadores de escritorio.Si actualmente estás usando plataformas populares como f.lux, para ajustar el brillo de tu monitor, te recomendamos que le des una oportunidad a BrightnessTray. Una opción sencilla y con las mismas prestaciones que sus principales competidores.El archivo .ZIP que encontrarás al finalizar la nota, lo hemos analizado en VirusTotal y el análisis a encontrado una amenaza en 59 posibles (TrendMicro-HouseCall). Por nuestra experiencia la detección es un falso positivo.Una plataforma muy fácil de usarAl ejecutar la herramienta observarás como la misma comienza a trabajar en la Bandeja del sistema. Su icono te mostrará un número que será el porcentaje de brillo actual del monitor. Pero si pinchas en él, se abrirá una ventana emergente desde la cual podrás subir o bajar el brillo del monitor, utilizando la rueda del ratón.Funciona muy bien en ordenadores portátilesTambién en la ventana emergente encontrarás una opción para desactivar la plataforma. Pero si pinchas con el botón auxiliar del ratón sobre el icono de la plataforma, podrás activar el modo de suspensión, desactivar el inicio automático del entorno y la opción Caffeine que evita que el sistema se apague cuando el ordenador queda inactivo.Por supuesto que existen alternativas más potentes que BrightnessTray. Como programas que cambian el brillo del monitor según la hora del día. Pero si lo que necesitas es una utilidad sencilla y que te sirva para ajustar el brillo de la pantalla, sin duda que tienes que darle una oportunidad a la herramienta.BrightnessTray es un programa gratuito que se encuentra disponible para sistemas operativos Windows.