Welcome to SecurityForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

NOD32 - False Positive for Hatu Trojan

 
   Security Forums (Home) -> General Discussions RSS
Next:  Just got hit by Trojan.Qhosts  
Author Message
bd

External


Since: Oct 05, 2003
Posts: 3



(Msg. 1) Posted: Sun Oct 05, 2003 3:07 pm
Post subject: NOD32 - False Positive for Hatu Trojan
Archived from groups: alt>comp>anti-virus (more info?)

Did anyone notice that a couple of days ago, NOD32 was getting false
positives for the hatu trojan?

All of the sudden I started getting AMON alerts, which made no sense
to me because NOD32 has always been up on my machine. I began to
download another anti-virus program to double check this, but did a
virus def update (which is set for every hour in NOD32) and sure
enough there was an update and the warnings went away.

I didn't see anything on the NOD32 web site about this. It could have
been damaging if I started deleting files left and right.

 >> Stay informed about: NOD32 - False Positive for Hatu Trojan 
Back to top
Login to vote
FromTheRafters

External


Since: Sep 19, 2003
Posts: 1207



(Msg. 2) Posted: Sun Oct 05, 2003 5:24 pm
Post subject: Re: NOD32 - False Positive for Hatu Trojan [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

wrote in message
> Did anyone notice that a couple of days ago, NOD32 was getting false
> positives for the hatu trojan?
>
> All of the sudden I started getting AMON alerts, which made no sense
> to me because NOD32 has always been up on my machine. I began to
> download another anti-virus program to double check this, but did a
> virus def update (which is set for every hour in NOD32) and sure
> enough there was an update and the warnings went away.
>
> I didn't see anything on the NOD32 web site about this. It could have
> been damaging if I started deleting files left and right.

Luckily for you, you are too clueful to do such a thing. More
people should realize the two things that an anti-virus program
can tell you, and what they mean.

1) I think that I found evidence that this file is malicious.
2) I found no evidence that this file is malicious.

Pertaining to #1, the program can be wrong. This is why
I phrased it as "I think that I found" instead of "I found".
Pertaining to #2, it should *not* be interpreted as "I found
evidence that this file is not malicious". Basically all that #2
tells you is that it is *probably* not a malicious program
known to the scanner (which is somewhat less reassuring
than the way most people interpret that particular AV
announcement).

 >> Stay informed about: NOD32 - False Positive for Hatu Trojan 
Back to top
Login to vote
Dennis Freshwater

External


Since: Jul 06, 2003
Posts: 3



(Msg. 3) Posted: Mon Oct 06, 2003 11:05 pm
Post subject: Re: NOD32 - False Positive for Hatu Trojan [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"FromTheRafters" wrote in message

>
> wrote in message

> > Did anyone notice that a couple of days ago, NOD32 was getting false
> > positives for the hatu trojan?

I emailed Eset on 3 Oct to let them know about the false alarms when I got
two reports on my computer but nothing on online scans. They replied the
same day to apologise and say that the problem had been fixed.

Dennis
 >> Stay informed about: NOD32 - False Positive for Hatu Trojan 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
False positive with a-squared anti trojan? -

PCANDIS5.sys Trojan or False Positive? - AVG Free 8.0 Resident Shield came up with PCANDIS5.sys as trojan Horse last night. Have put it in the Virus fault but can't seem to find anything about this file? So Trojan or False Positive????? Tim

Trojan Horse Generic8.LDI False Positive - My Free AVG has just done it's daily scan and it's come up with this Virus/Trojan Horse. It was in the following place: C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe This I understand is part of MS Works. Anyway I removed..

New False Positive from Spyware Doctor? - After today's update, Spyware Doctor reported the trojan backdoor.agent.air on 2 PCs today. In both cases, it appears it may be a false positive which is triggered by our use of the antivirus nod32 since the nod32 resides in that c:\Program~1\Eset\..

New False Positive From Spyware Doctor? - After today's update, Spyware Doctor reported the trojan backdoor.agent.air on 2 PCs today. In both cases, it appears it may be a false positive which is triggered by our use of the antivirus nod32 since the nod32 resides in that c:\Program~1\Eset\..
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]