Jump to content
paranoid_geek

Microsoft Security Essentials Detected Monitoring Tool Ardamax In Immunet 3.0 Temp Files

Recommended Posts

Immunet.3 version: 3.1.8.9567

OS: Microsoft Windows 7 Home Premium

Installed Antivirus Product: Microsoft Security Essentials

 

Issue: Microsoft Security Essentials (MSE) detected monitoring tool Ardamax in Immunet 3 temp files

 

MSE Report:

MonitoringTool: Win32/Ardamax

 

Category: Monitoring Software

 

Description: This program monitors user information.

 

Recommended action: Remove this software immediately.

 

Items:

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a95.tmp

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a96.tmp

 

Get more information about this item online.

 

Is this normal behaviour?

Or could this be a false positive raised by MSE?

Edited by paranoid_geek

Share this post


Link to post
Share on other sites

Those are temp files used during the normal operation of the ClamAV module. So these are indeed false positives. When using Immunet Free with another AV it is important to use exclusions for both programs to avoid conflicts such as this. Add an exclusion to MSE for Immunet's complete Program Files folder. C:\Program Files\Immunet would be the correct file path to use. Here is a link that explains how to add exclusions for Microsoft Security Essentials. http://maximumpcguid...le-or-location/ Also see if you can restore those files that MSE has quarantined. Then add an exclusion to Immunet for MSE's Program Files folder in Settings.

 

Exclusions allows users to to exclude certain files, directories and file types from being scanned. As the screenshot below illustrates, exclusions can be designated by file or folder, by file extension or by threat name.

ug134.jpg

 

Cheers, Ritchie...

  • Like 1

Share this post


Link to post
Share on other sites

MSE has a feature of being able to select processes to exclude from being sscanned. When you select exclusions in Immunet, does that automatically apply?

 

Thanks a lot!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...