PDA

View Full Version : TDS3 and RAMpage


Mike 714x
January 13th, 2004, 09:09 AM
Sorry if this is a repeat or if I missed the topic before-- TDS3 suddenly started detecting some activity in my rampage.exe file:

Scan Control Dumped @ 07:13:29 13-01-04
Positive identification: TrojanDropper.Win32.Small.o
File: c:\program files\rampage\rampage.exe

Scanning the entire rampage folder, all the files in the folder came up positive. I then downloaded the lastest TDS3 database ( I do that every couple of days) and the files no longer come up positive.

Was there a problem with the prior database that was causing the false positive, since the latest database does not detect the problem, or should I be looking deeper into my system for some other problem. Thanks.

Jooske
January 13th, 2004, 09:23 AM
Hi Mike and welcome.
The database has been refined to avoid legal programs to be detected for the same code parts used in a specific nasty. If it would now still alarm on your files, there would be all reasons to look deeper into the alarms!

Gavin - DiamondCS
January 13th, 2004, 10:52 PM
Yes this is corrected on the newest database (with 31151 references)

If you still have the alarm then send the file to us please, submit@diamondcs.com.au

Mike 714x
January 14th, 2004, 07:31 AM
Yes Gavin- it seems to have been corrected in the latest database, as you pointed out. Thanks for the quick response.