Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 12th, 2008, 12:32am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   False Positive?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: False Positive?  (Read 482 times)
RuyLopez
Newbie
*






   


Posts: 24
False Positive?
« on: Nov 22nd, 2006, 6:35pm »		 Quote Quote  Modify Modify
TH Guard has identified C:\Program Files\Webroot\Spy Sweeper\language.dll as TrojanSpy.Delf.261 based on the most recently available definitions downloaded 2006.11.22 with 9457 loaded process rules.  As long as TH Guard is set to automatically remove Trojans, Spy Sweeper becomes disabled.  If the file is restored from Quarantine, the file shows as a Bad Image and Spy Sweeper will not load on reboot.
 
A manual scan of that file using TH shows nothing, and the file shows as clean on both Jotti and VirusTotal.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5668
Re: False Positive?
« Reply #1 on: Nov 23rd, 2006, 12:12am »		 Quote Quote  Modify Modify
I've emailed Gavin about this.  It is obviously a THG false positive.  I'm having the same problem with a DLL that THG is kicking out on another program too.  I've had to disable THG until this problem is fixed....hopefully quite soon.  Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
mankind99uk
Newbie
*





   


Posts: 33
Re: False Positive?
« Reply #2 on: Nov 23rd, 2006, 3:22am »		 Quote Quote  Modify Modify
Also getting the same TrojanSpy.Delf.261 when I run East-Tec Eraser.
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 2043
Re: False Positive?
« Reply #3 on: Nov 23rd, 2006, 5:13am »		 Quote Quote  Modify Modify
Hi, please LiveUpdate and let me know if its fixed
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5668
Re: False Positive?
« Reply #4 on: Nov 23rd, 2006, 5:29am »		 Quote Quote  Modify Modify
The new update appears to have fixed the TrojanSpy.Delf.261 false positive in Sticky Password.  I don't have the other affected programs on my system to test them.
 
Thanks much !  Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
mankind99uk
Newbie
*





   


Posts: 33
Re: False Positive?
« Reply #5 on: Nov 23rd, 2006, 6:58am »		 Quote Quote  Modify Modify
Fixed  Smiley
IP Logged
RuyLopez
Newbie
*






   


Posts: 24
Re: False Positive?
« Reply #6 on: Nov 23rd, 2006, 9:49am »		 Quote Quote  Modify Modify
Fixed here as well.  Thanks!
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register