Is this a FP?:- RAT.Agent.gy

Hi,

Just updated TDS-3, and it found this:-

I think it is a FP, so if you use wwdc.exe please can you check?

Take Care,
TheQuest

 

Yep I get it with a right click scan, rather ironic as GK The author of WWDC is also a DCS beta tester & will probably have something to say about that.
I would say that it is definately an FP and Gavin will probably be when he reads this thread

Scan Control Dumped @ 21:59:27 20-01-05
Positive identification: RAT.Agent.gy
File: c:\documents and settings\pilli\desktop\utils\wwdc.exe

Positive identification: RAT.Agent.gy
File: c:\documents and settings\pilli\desktop\utils\wwdc.exe

Cheers. Pilli

 

Rat.agent.gy

Tds detected this trojan I sent to file to diamond before I deleted in safe mode. Is there anything else I may need to know or do now that this was detected?Thanks for your time.

 

Hi, Pilli

That very much for you reply.

Your right gkweb will not be best pleased.

The reason I post was I thought something might have "got at it".

Take Care,
TheQuest

 

Re: Rat.agent.gy

Hi, gre87y

Pilli and I think it is a PF. [well Positively a FP.]

Is this a FP?:- RAT.Agent.gy

Take Care,
TheQuest

 

I was just going to post the same.
Found it after having done a full system scan with TDS-3.
For your info: my version of wwdc.exe is 1.4.1

PS: scanned it also at Jotti's : clean
Cheers, Jan.

 

Thanks everyone, will fix this very soon

 

Thanks Gavin

I guess you don't need it to be send to you?

Keep up the good work !
Cheers, Jan.

 

I know whats wrong

Actually its fixed already, will get the database out soon but might as well add todays sigs first. Wont be long..

 

Well I already deleted it because Tds-3 gave a Positive on the thing. I would of thought if it wasn't a " postive" then it would of said suspious file instead. I know I should of confirmed if it was actually positive but I trusted my trojan scanner to have it right. Hopefully I never deleted something I need.
Cheers