This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mal/EncPk-AAK Alert on CitrixUpdates\GoToMeeting\7092\G2MCoreInstExtractor_6749_7092.exe

We just got the following "High" alert:

Manual cleanup required: 'Mal/EncPk-AAK' at 'C:\Users\xxxxxxxxxx\AppData\Local\Temp\CitrixUpdates\GoToMeeting\7092\G2MCoreInstExtractor_6749_7092.exe'

My guess is this is a false positive. Can anyone confirm? The link from Sophos Central Dashboard leads to a non-existent page: www.sophos.com/.../malencpkaak.html

This thread was automatically locked due to age.

0 jak over 7 years ago

Going by the file system location alone it would seem so.

You could make an exclusion for the file G2MCoreInstExtractor_6749_7092.exe in the short term if you know its origin to be good and submit a copy of the file:
https://community.sophos.com/kb/en-us/11490

You could double check the file here:
https://www.virustotal.com

before excluding it to give you some additional confidence.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel