Is this a FP?:- RAT.Agent.gy

[TheQuest]

Hi,

Just updated TDS-3, and it found this:-
-{ Quote: "Scan Control Dumped @ 20:46:08 20-01-05
Positive identification: RAT.Agent.gy
File: d:\window worm door cleaner v1.4\wwdc.exe" }-
I think it is a FP, so if you use wwdc.exe please can you check?

Take Care,
TheQuest 8)

[Pilli]

-{ Quote: "I think it is a FP, so if you use wwdc.exe please can you check?" }- Yep I get it with a right click scan, rather ironic as GK The author of WWDC is also a DCS beta tester :) & will probably have something to say about that.
I would say that it is definately an FP and Gavin will probably be :-[ when he reads this thread ;D

Scan Control Dumped @ 21:59:27 20-01-05
Positive identification: RAT.Agent.gy
File: c:\documents and settings\pilli\desktop\utils\wwdc.exe

Positive identification: RAT.Agent.gy
File: c:\documents and settings\pilli\desktop\utils\wwdc.exe

Cheers. Pilli

[gre87y]

Tds detected this trojan I sent to file to diamond before I deleted in safe mode. Is there anything else I may need to know or do now that this was detected?Thanks for your time.

[TheQuest]

Hi, Pilli

That very much for you reply.

-{ Quote: "rather ironic as GK The author of WWDC is also a DCS beta tester :) & will probably have something to say about that. " }-
Your right gkweb will not be best pleased. :D

The reason I post was I thought something might have "got at it".

Take Care,
TheQuest 8)

[TheQuest]

Hi, gre87y

-{ Quote: "Tds detected this trojan I sent to file to diamond before I deleted in safe mode. Is there anything else I may need to know or do now that this was detected?Thanks for your time." }-
Pilli and I think it is a PF. [well Positively a FP.]

Is this a FP?:- RAT.Agent.gy (http://www.wilderssecurity.com/showthread.php?t=62905)

Take Care,
TheQuest 8)

[FanJ]

I was just going to post the same.
Found it after having done a full system scan with TDS-3.
For your info: my version of wwdc.exe is 1.4.1

PS: scanned it also at Jotti's : clean ;)
Cheers, Jan.

[Gavin - DiamondCS]

Thanks everyone, will fix this very soon

[FanJ]

-{ Quote: "Thanks everyone, will fix this very soon" }-

Thanks Gavin :)

I guess you don't need it to be send to you?

Keep up the good work !
Cheers, Jan.

[Gavin - DiamondCS]

I know whats wrong :)

Actually its fixed already, will get the database out soon but might as well add todays sigs first. Wont be long..

[gre87y]

Well I already deleted it because Tds-3 gave a Positive on the thing. I would of thought if it wasn't a " postive" then it would of said suspious file instead. I know I should of confirmed if it was actually positive but I trusted my trojan scanner to have it right. Hopefully I never deleted something I need.
Cheers