Hi,

Today I got this from one of our servers.

Received From: (E-Business) 10.xx.xx.xx->rootcheck
Rule: 513 fired (level 9) -> "Windows malware detected."
Portion of the log(s):

Windows Malware: Possible Malware - Svchost running outside system32.
Process: svchost.exe.

Searching the lists there seems to be a bug on 64 bit OS`s.

http://www.mail-archive.com/[email protected]/msg02182.html

Yet the interesting thing is the server is clean and it is NOT a 64 bit.

Any ideas?



Özgür Özdemircili

Reply via email to