Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Jan 8th, 2009, 11:28am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   New False Positive?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: New False Positive?  (Read 239 times)
brother_dave
Newbie
*





   
Email

Posts: 7
New False Positive?
« on: Jul 16th, 2007, 8:52am »		 Quote Quote  Modify Modify
TH shows:
HKLM/Software/Microsoft/Windows/CurrentVersion/Run/PCTAVAPP
also in HKCU\identical to Run/PCTAVAPP as generic trojan.   this is however PCtools antivirus program.   Any ideas how to stop this false positive?    TH Calls it 'suspicious registry entry'  could just ignore it but would be nice to get a fix from either Mischel or PCTools
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5960
Re: New False Positive?
« Reply #1 on: Jul 16th, 2007, 9:44am »		 Quote Quote  Modify Modify
The problem of a valid pgm in two different RUN registry keys being flagged as "suspicious" is being worked on by the developer.  Unfortunately at the moment, it is part of the detection code.  It is my understanding that this will be rectified in the next TH release (date unknown).  
 
This "tactic" is used by malicious programs which is the reason it is getting detected.  There are a few good programs such as PCTools that use it as well for various/legitimate reasons.  
 
Sorry for the inconvenience.   Undecided
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
brother_dave
Newbie
*





   
Email

Posts: 7
Re: New False Positive?
« Reply #2 on: Jul 17th, 2007, 8:51am »		 Quote Quote  Modify Modify
Thanks for your quick response.  I was pretty sure that was the issue.  It's more of an inconvenience than a bug at the moment, but I'm glad to see it's being worked on.  I guess I'd sure rather have the double entries flagged than not. Smiley
 
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register