Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 3:33am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   THGuard exe flagged as Rootkit		 « No topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: THGuard exe flagged as Rootkit  (Read 136 times)
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 53
THGuard exe flagged as Rootkit
« on: Mar 12th, 2008, 2:15pm »		 Quote Quote  Modify Modify
Have just done a free scan for rootkits on my pc using PrevxCSI free and it has flagged TH Guard as a Rootkit infection.
C:\Program Files\TrojanHunter 5.0\THGuard exe
 
I know Guard exe is considered bad but surely there is a mistake from Prevx flagging TH 5.0 in this way?
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: THGuard exe flagged as Rootkit
« Reply #1 on: Mar 12th, 2008, 2:22pm »		 Quote Quote  Modify Modify
Quote:
I know Guard exe is considered bad but surely there is a mistake from Prevx flagging TH 5.0 in this way?

 
Well, obviously THGuard.exe is not a rootkit.  PrevX is reporting a False Positive, for sure.  It may be that PrevX does not like the code injection that THGuard.exe uses to protect itself from malicious shutdown.  At any rate, PrevX needs to be notified that they have a problem.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 53
Re: THGuard exe flagged as Rootkit
« Reply #2 on: Mar 12th, 2008, 2:32pm »		 Quote Quote  Modify Modify
siliconman01: Exactly, that's what I thought, just wanted to let people know here in case any others run the free scan from Prevx. Many thanks for your swift reply. Will have a look on prevx.com to see if there is any way to contact re the fp.
 
Cheers
 
editted: Have notified PrevX support of the problem.
« Last Edit: Mar 12th, 2008, 2:43pm by Gandalf » IP Logged
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 53
Re: THGuard exe flagged as Rootkit
« Reply #3 on: Mar 13th, 2008, 4:15am »		 Quote Quote  Modify Modify
Post update Contacted Prevex re: false positive. Have just had a reply from their support people: -  
 
"DO NOT REPLY TO THIS EMAIL. TO CONTACT TECHNICAL SUPPORT PLEASE USE THE
 METHODS BELOW.
 
Dear Prevx User,
 
Prevx Technical Support have responded to your query.
 
Here is the message that has just been posted:
 
************************************************************************ ***********
 
Subject: false positive being flagged in prevxcsi scan
 
Thanks for letting us know about this.
 
I have now corrected the determination.
 
Regards,
 
Prevx Support"
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5270
Re: THGuard exe flagged as Rootkit
« Reply #4 on: Mar 13th, 2008, 4:32am »		 Quote Quote  Modify Modify
Thank you very much for handling this issue with PrevX  Cheesy
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 53
Re: THGuard exe flagged as Rootkit
« Reply #5 on: Mar 13th, 2008, 7:28am »		 Quote Quote  Modify Modify
My pleasure  Smiley
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« No topic | Next topic »
Search
Members
Login
Register