Is this a FP?:- RAT.Agent.gy

Discussion in 'Trojan Defence Suite' started by TheQuest, Jan 20, 2005.

Thread Status:
Not open for further replies.
  1. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Hi,

    Just updated TDS-3, and it found this:-
    I think it is a FP, so if you use wwdc.exe please can you check?

    Take Care,
    TheQuest :cool:
     
  2. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Yep I get it with a right click scan, rather ironic as GK The author of WWDC is also a DCS beta tester :) & will probably have something to say about that.
    I would say that it is definately an FP and Gavin will probably be :oops: when he reads this thread :D

    Scan Control Dumped @ 21:59:27 20-01-05
    Positive identification: RAT.Agent.gy
    File: c:\documents and settings\pilli\desktop\utils\wwdc.exe

    Positive identification: RAT.Agent.gy
    File: c:\documents and settings\pilli\desktop\utils\wwdc.exe


    Cheers. Pilli
     
  3. gre87y

    gre87y Registered Member

    Joined:
    Oct 27, 2004
    Posts:
    164
    Rat.agent.gy

    Tds detected this trojan I sent to file to diamond before I deleted in safe mode. Is there anything else I may need to know or do now that this was detected?Thanks for your time.
     
  4. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Hi, Pilli

    That very much for you reply.

    Your right gkweb will not be best pleased. :D

    The reason I post was I thought something might have "got at it".

    Take Care,
    TheQuest :cool:
     
  5. TheQuest

    TheQuest Registered Member

    Joined:
    Jun 9, 2003
    Posts:
    2,301
    Location:
    Kent. UK by the sea
    Re: Rat.agent.gy

    Hi, gre87y

    Pilli and I think it is a PF. [well Positively a FP.]

    Is this a FP?:- RAT.Agent.gy

    Take Care,
    TheQuest :cool:
     
  6. FanJ

    FanJ Guest

    I was just going to post the same.
    Found it after having done a full system scan with TDS-3.
    For your info: my version of wwdc.exe is 1.4.1

    PS: scanned it also at Jotti's : clean ;)
    Cheers, Jan.
     
  7. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Thanks everyone, will fix this very soon
     
  8. FanJ

    FanJ Guest

    Thanks Gavin :)

    I guess you don't need it to be send to you?

    Keep up the good work !
    Cheers, Jan.
     
  9. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    I know whats wrong :)

    Actually its fixed already, will get the database out soon but might as well add todays sigs first. Wont be long..
     
  10. gre87y

    gre87y Registered Member

    Joined:
    Oct 27, 2004
    Posts:
    164
    Well I already deleted it because Tds-3 gave a Positive on the thing. I would of thought if it wasn't a " postive" then it would of said suspious file instead. I know I should of confirmed if it was actually positive but I trusted my trojan scanner to have it right. Hopefully I never deleted something I need.
    Cheers
     
Thread Status:
Not open for further replies.