Jump to content

tdsskiller antirootkit detecting Unsigned file Service: bthA2dp.sys Suspicious object. false positive?


Yari2000
Go to solution Solved by Yari2000,

Recommended Posts

Hi,

OS Windows 10 x64: I have started in safe mode with all disabled applications, run tdsskiller downloaded from Official Kaspersky USA site (tdss last update April 2019) 

I've run with all selected options: Boot section, Loaded Memory, Check signature and restarted for Loading Modules,

After the completed scan the result are:

Unsigned file

Service: BthA2dp Suspicious object, medium risk, Service type: Kernel driver 0x1, service start Demand 0x3 system32/drivers/bthA2dp.sys

Think it's a false positive... but i've scan on virustotal the checksum

 

Md5 CCA2505C9EB10CDABDC9FEE10D812F02

Sha256 8B0F65F411C463CBC68B8039D4795A3D3A356F6F18FF165F2C14439BD8FB569A

I've seen that have microsoft copyright and microsoft native application…

So i think it's a false positive... but imho i can't ensure 100% that isn't…

Can someone please help me with this file checking in virustotal the checksum? 

Link to comment
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...