Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 8:34pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   set exclusions		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: set exclusions  (Read 244 times)
PcMac
Newbie
*





   


Posts: 18
set exclusions
« on: Jan 24th, 2008, 4:51am »		 Quote Quote  Modify Modify
how do we set exclusions ,on good apps, that are named as trojans?
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: set exclusions
« Reply #1 on: Jan 24th, 2008, 5:36am »		 Quote Quote  Modify Modify
This is what is called False Positives.  There is not a method in TH to do what you want to do.  
 
Would you please submit the file(s) that TH is incorrectly detecting as malicious. The link below describes how to submit files.  It would help if you could also show in the email what the trojan name that TH is calling the application.  
 
http://www.misec.net/forum/board/FAQ/1139308293
 
If you have already tried the above route and did not receive any results, please state so here on this forum thread.  
 
If the application is being flagged as a "possible trojan", you can right click on the log line and add it to the Ignore list.
 
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
PcMac
Newbie
*





   


Posts: 18
Re: set exclusions
« Reply #2 on: Jan 24th, 2008, 6:07am »		 Quote Quote  Modify Modify
right click on the log line and add it to the Ignore list.....is greyed out
 
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: set exclusions
« Reply #3 on: Jan 24th, 2008, 8:07am »		 Quote Quote  Modify Modify
1.  Are you running V5.0 of TH?
 
2.  Is it calling it a "Possible Trojan"?  Or it is saying that it is a "Detected Trojan"?   (My wording might be a little off; however, the operative word is "Possible".)
 
3.  Is it a Registry key for an application that is being detected or the application itself?  I don't believe that Registry keys cannot be placed in the Ignore list.  
 
At any rate, if you submit the information as per my link above, Magnus/Gavin should be able to resolve the issue in a specific ruleset so that TH does not think it is a Possible Trojan or a Detected Trojan.  
 
Please read this link
 
http://www.misec.net/trojanhunter/help/?page=PossibleTrojanFiles
« Last Edit: Jan 24th, 2008, 8:09am by siliconman01 » IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
PcMac
Newbie
*





   


Posts: 18
Re: set exclusions
« Reply #4 on: Jan 24th, 2008, 8:28am »		 Quote Quote  Modify Modify
yes V5.0 of TH  
 
says “Found trojan module stickypasswordbho.dll loaded into process nmapp.exe (3332): Adware.BHO.243”
 
there is no log or file to upload
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: set exclusions
« Reply #5 on: Jan 24th, 2008, 9:24am »		 Quote Quote  Modify Modify
Ahhh.....good old Sticky Password....use it and love it on my Vista system.  However, I have had to submit stickypasswordbho.dll to Gavin a couple of times as a false positive.  
 
Would you please submit file stickypasswordbho.dll as per the instructions in the link below.  The gurus need the one off your system because there are several versions of this DLL.  stickypasswordbho.dll is in your C:\Program Files\Sticky Password folder.
 
http://www.misec.net/forum/board/FAQ/1139308293
 
Be sure to include in your email the line in the Quote below"  
 
Quote:
“Found trojan module stickypasswordbho.dll loaded into process nmapp.exe (3332): Adware.BHO.243”

 
so that Gavin knows immediately that it is the ruleset for Adware.BHO.243 that needs tweaked/fixed.
 
Are you running V3.3.1.19 of StickyPassword which is the latest version?  I have this latest version and there are no problems being reported by TrojanHunter.  
 
NOTE:
 
If you let TH quarantine this file, then this stickypasswordbho.dll file is in the Quarantine folder of TH at C:\Program Files\TrojanHunter 5.0\Quarantine.  Just send it in from this folder.
« Last Edit: Jan 24th, 2008, 9:30am by siliconman01 » IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: set exclusions
« Reply #6 on: Jan 24th, 2008, 11:50pm »		 Quote Quote  Modify Modify
pcMac,
 
Has this issue been resolved for you?
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
PcMac
Newbie
*





   


Posts: 18
Re: set exclusions
« Reply #7 on: Jan 25th, 2008, 3:11am »		 Quote Quote  Modify Modify
sent file in for you
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: set exclusions
« Reply #8 on: Jan 25th, 2008, 4:50am »		 Quote Quote  Modify Modify
Would you please run LiveUpdate for TrojanHunter and see if the FP has been fixed.  Gavin posted that the FPs have been fixed.
 
NOTE:  If you are running the Trial Version, please manually LiveUpdate as per the link below.
 
http://www.misec.net/trojanhunter/updating/
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register