another "False" positive or? Trojan???

Discussion in 'privacy problems' started by mimijo, Nov 20, 2005.

Thread Status:
Not open for further replies.
  1. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
  2. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
  3. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    It's a valid Norton file, certainly with NAV2003 and NAV2005, not sure about NPF. The directory looks correct too.
     
  4. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
    but why spybot detect it as Trojan?

    anyone has the same problem like me?

    i m using NPF 2006 + NOD32 + Spybot + Adaware...
     
  5. Smokey

    Smokey Registered Member

    Joined:
    Apr 1, 2002
    Posts:
    1,513
    Location:
    Annie's Pub
    Like Bigbuck already explained, it's a valid Norton file and correct directory.

    IMHO: a FP:)
     
  6. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    It's not detecting it as a trojan. It's simply a list of your startup apps. The value ccApp is pointing to ccApp.exe....a valid file in your symantec folder. What spybot is saying is that some malware 'pretends' to be ccApp......but in that case it would point to a random filename (like WMADZ.exe) and this would probably be in the Windows directory, not Symantec.
    Cheers.
     
  7. mimijo

    mimijo Registered Member

    Joined:
    Nov 8, 2005
    Posts:
    45
    alright, now after explaining, i seems to understand abit about what it means...
    so value is "ccApp" and filename is "ccApp.exe" and its inside Symantec's folder...that means its safe if its inside the "correct" folder and "correct" filename... :)

    thanks bigbuck & Smokey for the explaination...

    thanks!
     
  8. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    Cheers.
     
Loading...
Thread Status:
Not open for further replies.