Welcome, Guest. Please Login or Register.
Search
Members
Login
Register
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   Help Interpreting "Found Trojan File"		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Help Interpreting "Found Trojan File"  (Read 4862 times)
SteveF
Newbie
*





   


Posts: 2
Help Interpreting "Found Trojan File"
« on: May 12th, 2009, 7:46pm »		 Quote Quote  Modify Modify
I am a new user of TrojanHunter and wish to better interpret what the program is telling me.
 
I am running the software and getting the message "Found Trojan File: C:\Program Files\AT&T\WnClient\Programs\WnCSMServer.exe (dialer)". However, the scan process still say that no Trojans were found.
 
I would like to better understand what this means. How could a Trojan file find its way to my computer if I do not have any actual Trojans. I am somewhat concerned about a false positive. Can anyone shed light on this for me.
 
Thanks a lot.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7358
Re: Help Interpreting "Found Trojan File"
« Reply #1 on: May 13th, 2009, 12:54am »		 Quote Quote  Modify Modify
Welcome to the forum SteveF,  Cheesy
 
This sounds like a False Positive detection by THGuard.exe which is the realtime monitoriing component of TrojanHunter.  Would you please submit file WnCSMServer.exe as a possible False Positive per the instructions in the link below.
 
http://www.misec.net/forum/board/FAQ/1211189968
 
Gavin will analyze the file and respond back to you.
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
SteveF
Newbie
*





   


Posts: 2
Re: Help Interpreting "Found Trojan File"
« Reply #2 on: May 14th, 2009, 4:26pm »		 Quote Quote  Modify Modify
Thanks Siliconman,
 
A couple of additional pieces of information. 1) I was running the scanning software (not the realtime software) when I noticed this behavior. 2) When the scan finished about a half an hour later, it counted 1 Trojan found. Presumably the one Trojan found is the one I was questioning. Do you have any idea why the scanning software would take multiple minutes (at least 10 and probably more) to tally a discovered Trojan file despite cataloging it in the lower panel?
 
Thanks for your help. I appreciate it.
 
SteveF
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 7358
Re: Help Interpreting "Found Trojan File"
« Reply #3 on: May 15th, 2009, 1:09am »		 Quote Quote  Modify Modify
Hopefully you submitted the False Positive file per my request so that Gavin can fix this false detection, eh?  Gavin needs the file to correct the detection rule.  
 
Concerning your question on the scanner, the lower section of the scan window displays information/warnings/detections detail as the scanner is progressing through the scan.  When the scan is completed it then displays the summation statement of the total detections found during the scan.  
 
I hope this answers your question.  
 
IP Logged
______
TrojanHunter V5.5.1002...No. 1 AT in my Book and on my Box(es)! Windows 7 x64 Professional on a Dell XPS 410, 8 gbyte RAM, dual WD VelociRaptors, dual 24" UltraSharp FPD monitors, Logitech 5.1 Surround Sound; Windows 7 x86 Professional on a Dell Vostro 220s, 4 gbyte RAM, dual WD VelociRaptors. Common: router, cable modem.
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »