Is this an FP?..rockxp.exe/RAS.exe -> Not-A-Virus.PSWTool.Win32.RAS.a

Dear Ewido, Is this another FP? It is part of the programme RockXP,
This is the scan report, but the file could not be removed as it says it is embedded in RockXP. I believe I uploaded this to you before, so could you enlighten me please?

Thanks

 

i did a google search for "ras.exe" and found this:

http://castlecops.com/t140895-Sec_Suite_3_5_weird_scan_result.html

 

Sorry for the late reply... Yes, it's a possible threat and should be seen as an informational detection only. As the current version 3.5 does not yet have an ignore list, I can understand that such "gray area" files can really get annoying

 

apparently, "many" other anti-malware programs also flag "ras.exe".. here is mcafee's writeup on it.. (i don't know if mcafee still flags it, or not)

http://vil.nai.com/vil/content/v_127295.htm

i would imagine that "a-squared" would flag it since "a-squared" is known to flag some "suspicious" files..

 

Dear Peter and redwolfe, Thanks for your replies. I understand now- detection information only, and a possible threat. However, this tool can be useful at times, and my firewall would alert me to any thing trying to get out. But Maybe I will remove the offending file anyway.
Strange that A-squared does not detect it though or anything else [spybot/avast/adaware etc], just Ewido ss.
Thanks again.

 

Having said that Avast has just picked it up too.

 

It is really not virus *or* malware. Let me try and explain the why's about the report. Most all of the password finding logarithms used in the programs such as Port_RockXP_v4.exe will show as malwares.

So there is really nothing to worry about...the RockXP is retriving a hidden key, and also shows some passwords...(the key is a password in reality).

Allen