Trojanhunter 5 False Positives

Hi @ all, latest TH5 version claims nero6 to be spambot.a, but its fp:

Found trojan file: C:\Programme\Ahead\Nero\Nerodeu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero Wave Editor\vplugins-deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero Wave Editor\waveedit-deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero SoundTrax\SoundTrax-Deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\CoverDesigner\covered-deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero BackItUp\BackItUp-Deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero BackItUp\NBJ-Deu.nls (Generic.SpamBot.A)
Found trojan file: C:\Programme\Ahead\Nero BackItUp\NBR-Deu.nls (Generic.SpamBot.A)

Jotti: Datei: NBR-Deu.nls
Status:
OK
Entdeckte Packprogramme:
-
Bit9 rapportiert: No threat detected

A-Squared
No Virus found
AntiVir
No Virus found
ArcaVir
No Virus found
Avast
No Virus found
AVG Antivirus
No Virus found
BitDefender
No Virus found
ClamAV
No Virus found
CPsecure
No Virus found
Dr.Web
No Virus found
F-Prot Antivirus
No Virus found
F-Secure Anti-Virus
No Virus found
Fortinet
No Virus found
Kaspersky Anti-Virus
No Virus found
NOD32
No Virus found
Norman Virus Control
No Virus found
Panda Antivirus
No Virus found
Rising Antivirus
No Virus found
Sophos Antivirus
No Virus found
VirusBuster
No Virus found
VBA32
No Virus found

 

Hi,

Thank you for reporting this - it is a false positive. Please run LiveUpdate and tell me if that fixes the incorrect detection.

 

Hi Magnus, I tested evaluation version, Update is not possible.

 

Still false positives:
Found trojan file: C:\Programme\WinRAR\zip.sfx (Generic.RarDrop.B)
Found trojan file: C:\Programme\WinRAR\default.sfx (Generic.RarDrop.B)

 

Can you email the files to support@misec.net?

 

I scanned both files with jotti, absolutely no threat, maybe its easier for you to download and install winrar german version (no matter if 3.62 or 3.70), then you should see the results.

 

Hi,I have the same problem.Look what TH5 has found:
Found trojan file: C:\WINDOWS\system32\CDClose.dll (Upack)
Found trojan file: C:\Program Files\WinRAR\Default.SFX (Generic.RarDrop.B)
Found trojan file: C:\Program Files\WinRAR\Zip.SFX (Generic.RarDrop.B)
Found trojan file: C:\Program Files\Total Commander\Plugins\arc\Default.sfx (Generic.RarDrop.B)
Found trojan file: D:\Me\Programs\rnq\Historylib.dll (Upack)
Found trojan file: D:\Programs\nerosoftware\Nero.Media.Player.1.4.0.32.exe (Generic.PolyCrypt)
Found trojan file: D:\Programs\nerosoftware\NeroMix.1.4.0.32.exe (Generic.PolyCrypt)
Found trojan file: D:\Programs\nerosoftware\NeroVision.Express.3.1.0.7.exe (Generic.PolyCrypt)
Only TH5 reports that I have trojans.So could you say me if these are trojans or not?

 

LoL, I guess 99,999% false alarm.