KAV message "riskware not-a-virus:PSWTool.Win32.RAS.a", not a virus ?

[Thierry]

Hi,

Running KAV 6 beta at startup, I note that it detected some event,
displaying this strange message :
"deleted:riskware not-a-virusSWTool.Win32.RAS.a" in my external usb drive
(it is only used to save documents and file to install), a kind of archive.
These threats have been treated
It looks like a virus as it spread into 5 ther files and has been created in
a subs-subdirectory named "rockxp.exe" where some files were copied and that
I didn't know

The message is not display in red as for all other infections but in green,
so as if they were not armful.

Does someone knows if KAV did a mistake in removing them (I don't think as
it the the 2d time that it found them) ?
Then why does it reappear again as it was deleted, my SP2 firexwall is ON as
well all otpions and proactive defense under KAV and I also run bitdefender
and PCtools spyware for a crosscheck ?

In all cases I will also check on various virus database. The first time I
thought it was a mistake due to the message "not-a-virus" but I think that
it is a real virus !

Thanks
Thierrry

 

[Thierry]

Hi,

Running KAV 6 beta at startup, I note that it detected some event,
displaying this strange message :
"deleted:riskware not-a-virusSWTool.Win32.RAS.a" in my external usb
drive

It was indeed a virus. There is no many info in encyclopedia, but there is
any doubt it is one more.

Thierry

 

[Art]

It was indeed a virus. There is no many info in encyclopedia, but there is
any doubt it is one more.

The particular alert you got with the PSW in the name suggests that
what was detected has something to do with passwords. Usually the
PSW type malware are password stealers. But it wasn't a virus. Viruses
are replicative code. Most malware nowdays aren't viruses. Also, the
fact that it classified the code as "riskware" suggests that whatever
it is ... it may or may not present a threat to the user. Look at it
as a warning message.

Art

http://home.epix.net/~artnpeg