WinPatrol malwarebytes

[fletch]

Anybody getting hits on the WinPatrol network drivers from Malwarebytes?

[Digerati]

Not here. I cannot find anything to suggest that file and service is related to WinPatrol. While the file's digital signature is by Ruiware, the current developers of WinPatrol, it appears to be associated with a different product, Windows (R) Win 7 DDK.

[Pierre75]

Sorry, nothing here on either PC. Maybe Bret is able to clarify?

[fletch]

I saw the DDK connection.  Looks like netfilter2.sys that they renamed and signed.  Guess it's used to insert into the network layer to allow them control of things.  Perhaps a common method of infecting systems and MWB now flags those as "potentially" unwanted.

[Digerati]

Looks like netfilter2.sys that they renamed and signed.

Who is "they"?

[fletch]

Who is "they"?

Ruiware.  Apparently this was left behind from an early install of WinPrivacy.  I've deleted the file.  I'm told it's not used in the current release.