Hello,

Lately everytime I am analysing my computer with Ad Aware (the free Anniversary Edition) the software finds an unknown process, sfsync04 ( which is in Windows/system32/drivers) as a threat. I have tried to delete it, move it and every possibilities given, Ad Aware says that it was successful but if I analyse my computer straight away it'll find the same file again. I would like to know how to remove it or what I should do if it is a threat (as there is nothing I can do with Ad Aware).
I have also some problems with my mouse which moves from one point to another without doing anything, and I was wondering if this is linked with the sfsync04 file.

Thank you for your help

Regards

In this thread, the file was found clean:

http://www.lavasoftsupport.com/index.php?showtopic=24230

But you should not approve it for AE whitelist until you have them examine the file from your computer. I'll move this to the correct forum:

Guide for posting false positives

Hello -Isa-

Thank you for reporting this. For us to be able to take a closer look at this we need you to post a log file from when the file is detected. For more information on how to post a log file, please see: http://www.lavasoftsupport.com/index.php?showtopic=18033


Regards
LS Anders

Hello

Thank you for your help. I have uploaded the scan and the file so you can have a look at it. I hope I have done it well...

Best regards
Isa

Hello -Isa-

Thank you for uploading file and report. We will investigate this further to see why it is still being detected. In the mean time, have you tried scanning with the latest definitions?


Regards
LS Anders

Hello

Thank you. I have scanned my pc again with the update and I still have the same file found as a threat.

Regards
Isa

Hello

Ok. Could you please post the log file from the latest scan too and this time let the scan run through.


Regards
LS Anders

Here is the last scan from yesterday. I hope this will help.

Regards

Hi Isa,

Thanks for the scan log - while we check this out, could you let me know which, if any of the following applications you have installed on your machine? It appears this file is part of an application from www.star-force.com - I just want to check if you have any of their apps installed.

FL Disc
FL ProActive
FL Universal
FL MMOG New
FL Video
SF ProActive for Business
SF Corporative
SF Crypto
SF Mobile
SF Content

While we check out why this file is being detected, you can add it to your ignore list.

Regards,

Andy
Lavasoft Malware Labs

Hello,

I have looked for any of these apps and it seems that there is nothing like this on my computer. I have found a strange file and as I am not sure it is not part of one these apps I have enclosed it in case. Before asking you we have removed all the apps using star force so nothing should be left.

Regards
Isa

Hi -Isa-,

Could I ask you to update Ad-Aware and run another scan? Let me know if you are still getting this detection. Thanks!

Andy
Lavasoft Malware Labs

Hello

Yes I have scanned with the new update and the file is still found by Ad Aware. I enclose the scan log in case you need it.

Regards
Isa

Hi -Isa-,

Thanks for the log. The file itself is not in our detection database, so we are looking at a heuristic detection. Some more information here:

http://www.lavasoftsupport.com/index.php?showtopic=19734

I would suggest scanning again with heuristics switched off to verify that it is detected heuristically. The file is not considered malicious, so I recommend that you add it to your ignore list to avoid the heuristic detection picking this file up in the future.

Regards,

Andy
Lavasoft Malware Labs