Does PC-cillin mistake itself for a virus?

Hi everyone,

The file C:\Windows\System32\OSSoftwareAgentV1-dx0d5p keeps getting detected as a Trojan virus by PC-cillin.
However, when I analyzed it using Process Monitor, the file appears to be created by PC-cillin's own process.

Please see the attached images: screenshot1, 2, and 3.
screenshot1
screenshot2
screenshot3

Has anyone else encountered this issue, or is this a known false positive? Any insights would be greatly appreciated. 


Thanks!

Hi, 
 

Thank you for the detailed report and screenshots. Given that this issue involves a potential malware detection, we recommend conducting a real-time verification of the device environment, as static analysis alone may not fully capture the file's current behavior, execution context, or configuration state.

For that, please contact our support team for further investigation: 

Contact us · Trend Micro for Home

Hi, 

After diving deeper into the information from Process Monitor, I believe it really is a Trojan.
It hides within the Task Scheduler; even after PC-cillin deleted the risky files, it still managed to regenerate itself.
Therefore, I have disabled the task in Task Scheduler, and the alerts have stopped appearing.

I think this thread can be closed.
Thanks.