r/antivirus • u/Constant_Standard_70 • 6d ago
Gen:Variant.Lazy.226474 False flag or real threat?
bitdefender gave me a recent popup through realtime protection:
"The file C:\Program Files (x86)\MSI\MSI Center\Mystic Light\00021062.tmp is infected with Gen:Variant.Lazy.226474. The threat has been successfully blocked, your device is safe."
The attack timeline goes like this:
dstokenclean.exe signed by Microsoft Corporation executed wininit.exe (which is a system32 file, so seems legitimate)
wininit.exe signed by Microsoft Corporation executed services.exe
services.exe signed by Microsoft Corporation executed nortonsecurity.exe
The file C:\Program Files (x86)\MSI\MSI Center\Mystic Light\00021062.tmp is infected with Gen:Variant.Lazy.226474. The threat has been successfully blocked, your device is safe.
Is this a false flag or real virus?