Jump to content


Photo

Trojan Dected


  • This topic is locked This topic is locked
4 replies to this topic

#1 jmds1951

jmds1951

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 15 November 2013 - 06:39 PM

Hi,

I am a new subscriber and I have two incidences of a Trojan (Clam.Win.Trojan.Scarh) that have been quarantined. Is it necessary to remove the files? I keep getting a small pop up window with the alerts.

Thanks,
Mike
  • jiansimisibr likes this

#2 ritchie58

ritchie58

    Staff Member

  • Moderators
  • 1,812 posts
  • LocationOil City, Pa. U.S.A.

Posted 15 November 2013 - 11:28 PM

Hi Mike, don't delete anything yet. Other users have reported this detection name as a false positive. Do you use Defender or Security Essentials with Immunet? If so it very well could be a false positive. Click on Quarantine and click on one of the threat names. Does the file path look something like this? mpasdlta.vdm.new.temp The ClamAV module is flagging the antispyware defination update files for these programs as malicious. Steps are being taken to fix this situation. Also, thanks for including the threat name. That was very helpful!

Cheers, Ritchie...
  • jmds1951 likes this

* Immunet Global Forum Moderator *


#3 jmds1951

jmds1951

    Newbie

  • Members
  • Pip
  • 2 posts

Posted 16 November 2013 - 11:21 PM

Hi Ritchie,

I responded to your email with a screen shot of the virus but in case you didn't get it, here is the text:
A0DE4C84-D95D-4F77-9C4E

6DCFA5A79AFCmpasdlta.vdm.old.temp

has been detected as Clam.Win.Trojan.Scarh.Quarantine



Thanks for your help.


Regards,

Mike


#4 ritchie58

ritchie58

    Staff Member

  • Moderators
  • 1,812 posts
  • LocationOil City, Pa. U.S.A.

Posted 17 November 2013 - 12:03 AM

So I would assume then you do use either Defender or MSE. That's the same type of file being seen as a FP by other users too as I mentioned. Support should have this fixed by the end of the weekend. I'm hoping that anyways. Since it is a legit Microsoft file you could Restore the file from Quarantine now if you wanted to. When a file is restored from Quarantine it is automatically added to Immunet's Exclusion list and will no longer be scanned.

Something else you could do to help avoid any future conflicts is place the whole Program Files folder for Defender or MSE (which ever one you use) into Immunet's Exclusion list. That is recommended if you use Immunet Free with any other anitmalware program.

Regards, Ritchie...

* Immunet Global Forum Moderator *


#5 Jose

Jose

    Advanced Member

  • Administrators
  • 104 posts

Posted 18 November 2013 - 06:53 PM

Hey Mike,

I am going to close this thread as there is a larger one discussing this same issue.

TL;DR -This issue should be fixed soon, and you can stop-start Immunet while MSE is updating (instructions in the other thread, comment #8).

The other thread: http://forum.immunet...false-positive/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users