TrojanHunter FP's Runouce

FYI:
There are several FP's reported from TrojanHunter on the "Runouce family".
See http://www.misec.net/forum/board/FalsePositives/1336177131
And I know of several more than reported in that thread. Too tired now, submitting has to wait till tomorrow or the day after.

 

Just submitted the three files.
Found trojan file: C:\i386\DRW\DWWIN.EXE (Runouce.675)
Found trojan file: C:\Program Files\Internet Explorer\ExtExport.exe (Runouce.469)
And a file belonging to SpyReveal (Runouce.177).


Mods,
I made a mistake. I should have posted it in "other anti-trojan software" instead of "other anti-malware software". I'm sorry! Would you please be so kind to move the thread to the right place?

 

The FPs at the link below have been fixed.

http://www.misec.net/forum/board/FalsePositives/1336177131

Hopefully Gavin can get the remaining reported ones fixed shortly. He is sick with a bad case of the flu at the moment so "patience please".

 

Thanks Tom !

The three FP's I got were quickly fixed by Gavin

Everything fine (full scan done) with:
Ruleset datestamp : 2012-05-06
Scan kernel : 5.0 (Aurelius)
Ruleset entries : 523737
Trojan definitions : 117955
Detection rules : 523737

For Gavin:
Thanks very much, best wishes and get well soon !

 

Just curious FanJ, if the file in question was called either "welcome" or "start"

 

Hi LoneWolf,
I'll send you a private message. Give me a few minutes

 

Thanks again.

 

You're welcome, LoneWolf

 

Gavin has posted new definitions.

http://www.misec.net/forum/board/RulesetUpdates/1336119725

Ruleset datestamp : 2012-05-06
Scan kernel : 5.0 (Aurelius)
Ruleset entries : 523729
Trojan definitions : 117955
Detection rules : 523729