Trojanhunter 5 False Positives

Discussion in 'other anti-trojan software' started by SystemJunkie, Sep 1, 2007.

Thread Status:
Not open for further replies.
  1. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    Hi @ all, latest TH5 version claims nero6 to be spambot.a, but its fp:

    Found trojan file: C:\Programme\Ahead\Nero\Nerodeu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero Wave Editor\vplugins-deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero Wave Editor\waveedit-deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero SoundTrax\SoundTrax-Deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\CoverDesigner\covered-deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero BackItUp\BackItUp-Deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero BackItUp\NBJ-Deu.nls (Generic.SpamBot.A)
    Found trojan file: C:\Programme\Ahead\Nero BackItUp\NBR-Deu.nls (Generic.SpamBot.A)

    Jotti: Datei: NBR-Deu.nls
    Status:
    OK
    Entdeckte Packprogramme:
    -
    Bit9 rapportiert: No threat detected

    A-Squared
    No Virus found
    AntiVir
    No Virus found
    ArcaVir
    No Virus found
    Avast
    No Virus found
    AVG Antivirus
    No Virus found
    BitDefender
    No Virus found
    ClamAV
    No Virus found
    CPsecure
    No Virus found
    Dr.Web
    No Virus found
    F-Prot Antivirus
    No Virus found
    F-Secure Anti-Virus
    No Virus found
    Fortinet
    No Virus found
    Kaspersky Anti-Virus
    No Virus found
    NOD32
    No Virus found
    Norman Virus Control
    No Virus found
    Panda Antivirus
    No Virus found
    Rising Antivirus
    No Virus found
    Sophos Antivirus
    No Virus found
    VirusBuster
    No Virus found
    VBA32
    No Virus found
     
  2. Magnus Mischel

    Magnus Mischel Security Expert

    Joined:
    Oct 24, 2002
    Posts:
    185
    Hi,

    Thank you for reporting this - it is a false positive. Please run LiveUpdate and tell me if that fixes the incorrect detection.
     
  3. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    Hi Magnus, I tested evaluation version, Update is not possible.
     
  4. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    Still false positives:
    Found trojan file: C:\Programme\WinRAR\zip.sfx (Generic.RarDrop.B)
    Found trojan file: C:\Programme\WinRAR\default.sfx (Generic.RarDrop.B)
     
  5. Magnus Mischel

    Magnus Mischel Security Expert

    Joined:
    Oct 24, 2002
    Posts:
    185
  6. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    I scanned both files with jotti, absolutely no threat, maybe its easier for you to download and install winrar german version (no matter if 3.62 or 3.70), then you should see the results.
     
    Last edited: Sep 12, 2007
  7. MoonlightDancer

    MoonlightDancer Registered Member

    Joined:
    Sep 17, 2007
    Posts:
    1
    Hi,I have the same problem.Look what TH5 has found:
    Found trojan file: C:\WINDOWS\system32\CDClose.dll (Upack)
    Found trojan file: C:\Program Files\WinRAR\Default.SFX (Generic.RarDrop.B)
    Found trojan file: C:\Program Files\WinRAR\Zip.SFX (Generic.RarDrop.B)
    Found trojan file: C:\Program Files\Total Commander\Plugins\arc\Default.sfx (Generic.RarDrop.B)
    Found trojan file: D:\Me\Programs\rnq\Historylib.dll (Upack)
    Found trojan file: D:\Programs\nerosoftware\Nero.Media.Player.1.4.0.32.exe (Generic.PolyCrypt)
    Found trojan file: D:\Programs\nerosoftware\NeroMix.1.4.0.32.exe (Generic.PolyCrypt)
    Found trojan file: D:\Programs\nerosoftware\NeroVision.Express.3.1.0.7.exe (Generic.PolyCrypt)
    Only TH5 reports that I have trojans.So could you say me if these are trojans or not?
     
  8. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    LoL, I guess 99,999% false alarm. :D :D :D :D :D
     
Thread Status:
Not open for further replies.