Jump to content
byeshu

False Positive

Recommended Posts

I did some checking and TeraCopy is a legitimate file transfer software. In fact CNET & reviewers gives it high marks. What you can do is open the GUI and click on Quarantine just below History. There you have the option to delete or restore the file(s) that Immunet has quarantined. Make sure that the file(s) are associated with TeraCopy and choose restore. This will automatically add the file(s) to Immunet's Exclusion List. If you have trouble restoring the file(s) from Quarantine you can manually add TeraCopy's Program Files folder to the Exclusion List which is located in the Settings. This should work for you until the software is white-listed by the Immunet Staff. Best wishes, Ritchie...

Share this post


Link to post
Share on other sites

thanks ritchie,

 

for info, i do have teracopy and immunet installed on my notebook.

But immunet didn't detect teracopy as trojan. the detection of teracopy as trojan by immunet is only on my desktop.

hows this possible? could u pls help on this....

thanks.

Share this post


Link to post
Share on other sites

That is kind of strange byeshu. This is strictly conjecture on my part but maybe it has to do with the operating system. Are you using a different operating system on your desktop PC compared to your notebook? Do you remember the exact malware detection name? You could run the Support Diagnostic Tool on your desktop PC (click on Start > scroll down to the Immunet folder and click on that > click on the Support Diagnostic Tool, it will create a zip file on your desktop and upload that as an attachment in your email) and submit that report to support@immunet.com Include a detailed summary. Tell them the type of operating system(s) you have on both computers (Windows? - 32 or 64bit?), what exactly happened and any relevant screenshots if you have any.

Share this post


Link to post
Share on other sites

hey ritchie,

 

ur right! immunet detected teracopy as trojan in win7. and in xp its quiet and cool.

i cleared the quarantined objects. i can send u the screenshot next time. and to add i have checked with virustotal the detections of immunet. hardly 1/43 engines .. that too suspicsion. hope for the best. i am using skyrecon storm shield. do u have any idea about that? is it mandatory to use firewall in addition to immunet and my mainstream av Avira free 2012? please suggest.

 

Thanks.

Share this post


Link to post
Share on other sites

Hi byeshu, I'm not familiar with Skyrecon Storm Shield. I did check the internet a bit and found that Storm Shield is used primarily in a networked sever based environment by IT professionals. I suppose you could configure it for individual use. Storm Shield does include a firewall in it's software package. Is that the firewall you're using now? You should always run a firewall even if you have anti-malware protection weather it be the built in Windows firewall or a good third party firewall. A firewall protects your system from unauthorized access (hackers) and added virus protection.

Share this post


Link to post
Share on other sites

hey ritchie bro,

 

i have been using Avira free. to me it works fine. but i have interest in comodo Internet security. come to know that ur using comodo through the forum. how is comodo? i have seen that all the review blame the av that its not to the mark. pls suggest...

 

Thanks

Share this post


Link to post
Share on other sites

Yes I do use Comodo Internet Security and prefer it over the Windows Firewall as its much more easily configurable especially for out-bound rule creation and it does very well in independent leak tests. I use just the Firewall and the Defense+ (behavioral blocking) modules since as you say Comodo's AV is not the best. I don't need it anyway since I already have Panda Cloud and Immunet running. During the install you have the option to choose which modules you want to install. If you give it a try just install the Firewall and Defense+ features and omit the anti-virus module since you already have Avira and Immunet. Then only run one Firewall. Turn off the Storm Shield and/or Windows Firewall if they are running. Using more than one firewall can lead to undesirable system behavior. Here is a link to filehippo.com where you can download the newest version. Click here. Let me know what you decide to do. Best wishes, Ritchie...

Share this post


Link to post
Share on other sites

I did a little more research on SkyRecon Storm Shield. They do have a "for personal use" edition for the average home user which works primarily as a behavior analysis/blocker. That is the edition you are using, right? Or are you using the endpoint server based Business Edition? That does have a built in firewall and AV along with behavior blocking.

Share this post


Link to post
Share on other sites

bro,

 

i am using skyrecon stormshield personal edition. wish to give it a try! whats ur opinion? thanks for suggesting comodo fw and d+. i too googled and found that comodo has been consistently unbeatable in their firewall category. by the way bro, whats ur opinion?

 

urs,

yeshu

Share this post


Link to post
Share on other sites

I use a layered approach to my PC's security too. Currently I have two behavior analysis/blockers running, Mamutu and Comodo's Defense+. It's finding the right software that will give you the protection that's needed but also are compatible with each other! I would assume you have the Windows Firewall turned on if you haven't installed Comodo. If not, turn that on until you decide what you're going to do but it's really up to you as to what your preferences are. If your happy with the Windows 7 Firewall, I'd say keep using it. Experts agree that it is adequate for most home users but if you want a firewall with the added benefits that Comodo will provide, as I described in my previous posts, then I would say give it a try. Comodo is more configurable with lots of tweaks and added features that the Win 7 Firewall doesn't have. If, on the other hand, you find that Comodo is too bothersome or complicated (there is a learning curve for this software to understand how to get the best out of it but the time spent is worth it in my opinion & I could help you with the settings) you can always uninstall it and turn the Windows Firewall back on.

Share this post


Link to post
Share on other sites

my query your opinion regarding stormshield. my windows fw is turned on. planning to switch to comodo fw and d+.

and again immunet after fresh install detected teracopy as trojan. this time no option to restore the quarantined file. and my teracopy doesn't work once quarantined by immunet. what to do?

 

planning to uninstall immunet!! :-( :(

 

and i made a screen shot by print screen and copied in word. but the forum doesn't allow me to attach that file.

 

urs,

yeshu

Share this post


Link to post
Share on other sites

hi ritchie,

 

added teracopy in exclusion list. fine. and regarding comodo internet security, i have been using it for the past two weeks. slight sluggishness with the system. and the av system scan completed only 6% during the whole night. do u have any idea? i heard that CIS is a light program. could u suggest on this?

 

urs,

yeshu

Share this post


Link to post
Share on other sites

Any security software you use, such as your firewall & real-time AV is going to affect performance to some degree. It's a trade off we all make of performance vs. keeping all the bad things out of our computers. Plus it depends a lot on how fast your computer is. With an older slower PC this would be more noticeable. Did you install Comodo's AV too? Are you still using StormShield? If you installed Defense+ you could get away with not using Storm Shield as they both do pretty much the same thing. That would give you a performance gain I bet. If you're still using Avira & Immunet you don't need Comodo's AV running, that too will help. Was it Immunet's scan that quit at 6%? I know when I do a full scan of all drives with IMP it takes about 6 hours to complete. Avira should work with Comodo as log as you have allowed Avira's updater to access the internt.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...