Support Forum for TrojanHunter anti-malware remover and other products, including freeware

Welcome, Guest. Please Login or Register.

Search

Members

Login

Register

   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Guard (Moderators: Helena, Gavin_Coe, Magnus)
   THGuard exe flagged as Rootkit

« Previous topic | Next topic »

Pages: 1

Notify of replies

Send Topic

Author

Topic: THGuard exe flagged as Rootkit (Read 1486 times)

Gandalf
Junior Member

Love, Light & Peace

Gender: male

Posts: 73

THGuard exe flagged as Rootkit
« on: Mar 12^th, 2008, 2:15pm »

Quote

Modify

Have just done a free scan for rootkits on my pc using PrevxCSI free and it has flagged TH Guard as a Rootkit infection.
C:\Program Files\TrojanHunter 5.0\THGuard exe

I know Guard exe is considered bad but surely there is a mistake from Prevx flagging TH 5.0 in this way?

IP Logged

siliconman01
Global Moderator

Trojans! Chew 'em Up, Spit 'em Out...

Gender: male

Posts: 7358

Re: THGuard exe flagged as Rootkit
« Reply #1 on: Mar 12^th, 2008, 2:22pm »

Quote

Modify

Quote:

I know Guard exe is considered bad but surely there is a mistake from Prevx flagging TH 5.0 in this way?

Well, obviously THGuard.exe is not a rootkit. PrevX is reporting a False Positive, for sure. It may be that PrevX does not like the code injection that THGuard.exe uses to protect itself from malicious shutdown. At any rate, PrevX needs to be notified that they have a problem.

IP Logged

______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.

Gandalf
Junior Member

Love, Light & Peace

Gender: male

Posts: 73

Re: THGuard exe flagged as Rootkit
« Reply #2 on: Mar 12^th, 2008, 2:32pm »

Quote

Modify

siliconman01: Exactly, that's what I thought, just wanted to let people know here in case any others run the free scan from Prevx. Many thanks for your swift reply. Will have a look on prevx.com to see if there is any way to contact re the fp.

Cheers

editted: Have notified PrevX support of the problem.

« Last Edit: Mar 12^th, 2008, 2:43pm by Gandalf »

IP Logged

Gandalf
Junior Member

Love, Light & Peace

Gender: male

Posts: 73

Re: THGuard exe flagged as Rootkit
« Reply #3 on: Mar 13^th, 2008, 4:15am »

Quote

Modify

Post update Contacted Prevex re: false positive. Have just had a reply from their support people: -

"DO NOT REPLY TO THIS EMAIL. TO CONTACT TECHNICAL SUPPORT PLEASE USE THE
METHODS BELOW.

Dear Prevx User,

Prevx Technical Support have responded to your query.

Here is the message that has just been posted:

************************************************************************ ***********

Subject: false positive being flagged in prevxcsi scan

Thanks for letting us know about this.

I have now corrected the determination.

Regards,

Prevx Support"