Covert.Sys.Exe
 

Except it doesn't show up as that until you run it through Jotti ( http://virusscan.jotti.org/ )or VirusTotal ( http://www.virustotal.com/en/indexf.html ) - even then, only PrevX1 is flagging it as that. (NOD32, my A/V isn't alarming on it).

Anyone know if that's a true "hit" or not, or definitely a false positive? :eek:

that file is bogus..what it does I don't know...and I refuse to find out the hard way...

That makes two of us (which would be why I submitted it and then deleted it without clicking on it to open it).

Definitely a good "head's-up" in case anyone else runs across it, though.

this came up a couple of weeks ago...but it certainly doesn't hurt to repost the concept...