Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Sep 6th, 2008, 11:12pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   Possible false positive.		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Possible false positive.  (Read 141 times)
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 64
Possible false positive.
« on: Jun 14th, 2008, 4:08am »		 Quote Quote  Modify Modify
Running scan today on XP-Pro SP3. TH5 latest ruleset is flagging a file as a Trojan: -  
+-- General ---------------------------------
Ruleset datestamp    : 2008-06-13
Scan kernel     : 5.0 (Aurelius)
Ruleset entries      : 176269
Trojan definitions   : 67320
Detection rules      : 176269
 
Found trojan file: C:\Documents and Settings\Administrator\downloads\Creative mp3 player recovery tool\CT-RT_PCAPP_INT_1_0_8_2.exe (TrojanDropper.Agent.887)
 
Quarantined file C:\Documents and Settings\Administrator\downloads\Creative mp3 player recovery tool\CT-RT_PCAPP_INT_1_0_8_2.exe
This is an old file which I have never had to execute. Will leave it in Quarantine in case Gavin would like to see the file in question.
 
Cheers
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5603
Re: Possible false positive.
« Reply #1 on: Jun 14th, 2008, 4:41am »		 Quote Quote  Modify Modify
Yep, certainly looks it is a False Positive.  Sad
 
Would you please attach the file that is in the TrojanHunter Quarantine folder to an e-mail and send to submit@misec.net for Gavin to examine.  It is already encrypted so you shouldn't need to zip it.
 
Please include a link to this post in your e-mail and state the subject as "Probable False Positive"
 
Thanks in advance for the submittal.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1990
Re: Possible false positive.
« Reply #2 on: Jun 14th, 2008, 5:11am »		 Quote Quote  Modify Modify
Thanks, fixing
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Posts: 1990
Re: Possible false positive.
« Reply #3 on: Jun 14th, 2008, 5:17am »		 Quote Quote  Modify Modify
Should be fixed after using LiveUpdate
IP Logged
Gandalf
Junior Member
**



Love, Light & Peace

   


Gender: male
 Posts: 64
Re: Possible false positive.
« Reply #4 on: Jun 14th, 2008, 5:54am »		 Quote Quote  Modify Modify
Hi. Didn't need to submit then. Seeing as Gavin said should be fixed after running LU, restored file, right-click scanned - not being flagged anymore.
 
Many thanks Gentlemen.
 
G
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register