[ossec-dev] [Bug 56] New: Windows 2003 64-bit false positive malware

[ossec-bugzilla@xxxxxxxxxxxxxxxxxxxxxxxxxxx]

http://www.ossec.net/bugs/show_bug.cgi?id=56

           Summary: Windows 2003 64-bit false positive malware
           Product: OSSEC
           Version: 1.3
          Platform: PC
        OS/Version: Windows-2003
            Status: NEW
          Severity: minor
          Priority: P2
         Component: rootkit-detection
        AssignedTo: ossec-dev@xxxxxxxxx
        ReportedBy: dlowe@xxxxxxxxx


"Windows Malware: Possible Malware - Svchost running outside
system32."

64-bit Windows also stores/executes svchost from C:\WINDOWS\SysWOW64


-- 
Configure bugmail: http://www.ossec.net/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.