Trust level:

• suspicious()

Summary:

• We detected this file as suspicious. As we use heuristic for detection we cannot be 100% sure, that the file is really harmful.

File location:

• %win_dir%\system32\drivers\nav\1605000.07c\symelam.sys

Details:

• The file has digital signature but it is not valid: Microsoft Windows Early Launch Anti-malware Publisher.
• Company is Symantec Corporation(1.0.0.111).
• File checksum is 02F3073C3933190DFD24BC35800172B4.
• Starts at system boot.
• Registered as SymELAM, Symantec ELAM Driver.

Take advantage of WinDetect to do a full search for potentially harmful files on your PC. WinDetect is a free security program for Windows. WinDetect is an anti-spyware utility that selectively searches areas on your hard drive and registry where unwanted files may be hidden or disguised. WinDetect evaluates each item heuristically using multiple tests and flags files or entries that are possibly malicious. Since WinDetect looks at file characteristics instead of searching for virus signatures, it completes scans very fast. Experienced users use WinDetect to find viruses, root kits, keyloggers, Trojans, spyware, downloaders and other kinds of malware.

WinDetect can also disable most suspicious files at your option. WinDetect does not conflict with other antivirus tools and may detect malware that conventional antivirus software fails to find. WinDetect shows the risk level of each file it flags, the reason for flagging the file, and offers the option of disabling the file whenever possible. In addition, WinDetect users can go directly from each suspicious file’s report to an online resource with complete details and recommendations regarding the file.

WinDetect spots millions of spyware and malware infections, including symelam.sys

More...