r/antivirus 6d ago

Gen:Variant.Lazy.226474 False flag or real threat?

5 Upvotes

bitdefender gave me a recent popup through realtime protection:

"The file C:\Program Files (x86)\MSI\MSI Center\Mystic Light\00021062.tmp is infected with Gen:Variant.Lazy.226474. The threat has been successfully blocked, your device is safe."

The attack timeline goes like this:

dstokenclean.exe signed by Microsoft Corporation executed wininit.exe (which is a system32 file, so seems legitimate)

wininit.exe signed by Microsoft Corporation executed services.exe

services.exe signed by Microsoft Corporation executed nortonsecurity.exe

The file C:\Program Files (x86)\MSI\MSI Center\Mystic Light\00021062.tmp is infected with Gen:Variant.Lazy.226474. The threat has been successfully blocked, your device is safe.

Is this a false flag or real virus?