False Positive report = Downloader.Agent.awf

Discussion in 'ewido anti-spyware forum' started by ElPiedra, Oct 7, 2006.

Thread Status:
Not open for further replies.
  1. ElPiedra

    ElPiedra Infrequent Poster

    Joined:
    Jan 11, 2005
    Posts:
    25
    Location:
    Miami
    I found reports in several Supporftforums on a False Positive associated to the detection of Downloader.Agent.awf

    It seems to be detecting the malware in files from:

    HP, MS Money, and McAfee.
    http://www.spywareinfoforum.com/index.php?showtopic=86758
    Real, QuickTime, PC-cillin, Virtual PDF Printer
    http://www.forospyware.com/t31836.html

    Easy CD, HP, MS Works, iTouch, NAV, SpyBot S&D
    http://www.bleepingcomputer.com/forums/topic66728.html
     
  2. btman

    btman Registered Member

    Joined:
    Feb 11, 2006
    Posts:
    576
    I have quicktime and MS money and it's not detecting those.
     
  3. peter.ewido

    peter.ewido former ewido team

    Joined:
    Nov 10, 2003
    Posts:
    737
    Location:
    Brno, Czech Republic
    No, these files don't look like they are false positives. Quite a lot malware uses common file names for hiding in logs, this detection has been in our database since several months, there were no false reports so far, no false detection in our huge whitelist and a wrong definition that causes so many different files to be detected is almost impossible. However, I would still prefer to get a copy of at least one of the files to be 100% sure :)
     
Thread Status:
Not open for further replies.