False positive: MS Application Compatibility Toolkit

R

Robin Walker

MSAS detects the following Registry entries as being the "TIB Porn Dialer":

HKEY_CLASSES_ROOT\AtlBrCon.AtlBrCon.1
HKEY_CLASSES_ROOT\AtlBrCon.AtlBrCon.1\CLSID
{0818D430-6247-11D1-ABEE-00D049C10000}
HKEY_CLASSES_ROOT\AtlBrCon.AtlBrCon.1 AtlBrCon Class
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1\CLSID
{0818D430-6247-11D1-ABEE-00D049C10000}
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1 AtlBrCon Class
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon\CurVer
AtlBrCon.AtlBrCon.1
HKEY_CURRENT_USER\SOFTWARE\Classes\AtlBrCon.AtlBrCon AtlBrCon Class

In fact, these keys appear to have been created by the
Microsoft Windows Application Compatibility Toolkit v3.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top