False positive - Heuristic.Win32.Dialer

Discussion in 'ewido anti-spyware forum' started by Mr_JAk3, Sep 3, 2006.

Thread Status:
Not open for further replies.
  1. Mr_JAk3

    Mr_JAk3 Registered Member

    Joined:
    Sep 3, 2006
    Posts:
    2
    Hi, I would like to report a false positive.

    Here is the "infection" from Ewido 4.0 log:

    C:\Programfiler\Elektroniske tjenester\Tele2\t2no.exe/setup.exe -> Heuristic.Win32.Dialer : Cleaned with backup (quarantined).

    Here are the results from virustotal.com scan:
    Code:
    Antivirus Version Update Result
    AntiVir 7.1.1.11 09.01.2006  no virus found
    Authentium 4.93.8 09.02.2006  no virus found
    Avast 4.7.844.0 09.01.2006  no virus found
    AVG 386 09.01.2006  no virus found
    BitDefender 7.2 09.02.2006  no virus found
    CAT-QuickHeal 8.00 09.02.2006  no virus found
    ClamAV devel-20060426 09.02.2006  no virus found
    DrWeb 4.33 09.02.2006  no virus found
    eTrust-InoculateIT 23.72.113 09.01.2006  no virus found
    eTrust-Vet 30.3.3056 09.01.2006  no virus found
    Ewido 4.0 09.02.2006 Heuristic.Win32.Dialer
    Fortinet 2.77.0.0 09.02.2006  no virus found
    F-Prot 3.16f 09.01.2006  no virus found
    F-Prot4 4.2.1.29 09.01.2006  no virus found
    Ikarus 0.2.65.0 09.01.2006  no virus found
    Kaspersky 4.0.2.24 09.02.2006  no virus found
    McAfee 4843 09.01.2006  no virus found
    Microsoft 1.1560 09.02.2006  no virus found
    NOD32v2 1.1736 09.02.2006  no virus found
    Norman 5.90.23 09.01.2006  no virus found
    Panda 9.0.0.4 09.02.2006  no virus found
    Sophos 4.09.0 09.02.2006  no virus found
    Symantec 8.0 09.02.2006  no virus found
    TheHacker 5.9.8.203 09.01.2006  no virus found
    UNA 1.83 09.02.2006  no virus found
    VBA32 3.11.1 09.01.2006  no virus found
    VirusBuster 4.3.7:9 09.02.2006 no virus found 
    Tele2 seems to be a norwegian ISP. The original thread can be found here

    Thanks :)
     
  2. kjempen

    kjempen Registered Member

    Joined:
    May 6, 2004
    Posts:
    379
    I am a Norwegian, and from what I can see, it seems this is indeed a "dialer" tool (not a malicious one) for calling up/connecting to a Norwegian ISP.
     
  3. peter.ewido

    peter.ewido former ewido team

    Joined:
    Nov 10, 2003
    Posts:
    737
    Location:
    Brno, Czech Republic
Thread Status:
Not open for further replies.