Answered by:
Malware Alert

Question
-
the last two mornings Livecare came up with a Malware Alert on this computer. I ran Livecare safety scan as instructed and both times no viruses or spware was found. Is this going to happen every morning and if so how do i stop it.
the referenced file was XDVAnnn.sys and when i search for the file on the computer it cant find it???Friday, March 6, 2009 2:37 PM
Answers
-
XDVAnnn.sys should be in a folder named Xtrap and is included in certain online games. In searching some gaming forums it seems that XDVAnnn.sys is identified as potential malware by some antimalware applications. I saw nothing that would confirm it as malware. You could exclude it from One Care scans if you consider the file safe but I would contact support to confirm it as malware or a false positive. How to reach support - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90
Jim- Marked as answer by Stephen BootsMVP, Moderator Monday, March 9, 2009 7:09 PM
Friday, March 6, 2009 6:20 PMModerator
All replies
-
XDVAnnn.sys should be in a folder named Xtrap and is included in certain online games. In searching some gaming forums it seems that XDVAnnn.sys is identified as potential malware by some antimalware applications. I saw nothing that would confirm it as malware. You could exclude it from One Care scans if you consider the file safe but I would contact support to confirm it as malware or a false positive. How to reach support - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90
Jim- Marked as answer by Stephen BootsMVP, Moderator Monday, March 9, 2009 7:09 PM
Friday, March 6, 2009 6:20 PMModerator -
Follow the instructions in this post, http://social.microsoft.com/Forums/en-US/onecareanti-virus/thread/6a1361cb-ae28-4d0b-94df-ae2ae890de29 , to report a suspected false positive - a threat detected by OneCare in error.
Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum ModeratorMonday, March 9, 2009 7:10 PMModerator -
I'm a noob Mod that helps with support for the MMO Pristontale. We're having numerous users with the same issue. This is a valid file for the anti-hack software Xtrap, and one used by Pristontale's newest Xtrap version, as well.Tuesday, March 31, 2009 1:46 AM
-
Thanks for the input. If your users are having this file flagged by One Care they can report a false positive per the instructions in this link - http://support.microsoft.com/kb/921159/en-us
Jim - MVP Windows Live - Forum Moderator - Live One Care - Live MeshTuesday, March 31, 2009 1:59 AMModerator