paranoid_geek Posted January 20, 2014 Report Share Posted January 20, 2014 Immunet.3 version: 3.1.8.9567 OS: Microsoft Windows 7 Home Premium Installed Antivirus Product: Microsoft Security Essentials Issue: Microsoft Security Essentials (MSE) detected monitoring tool Ardamax in Immunet 3 temp files MSE Report: MonitoringTool: Win32/Ardamax Category: Monitoring Software Description: This program monitors user information. Recommended action: Remove this software immediately. Items: file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a95.tmp file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a96.tmp Get more information about this item online. Is this normal behaviour? Or could this be a false positive raised by MSE? Link to comment Share on other sites More sharing options...
ritchie58 Posted January 20, 2014 Report Share Posted January 20, 2014 Those are temp files used during the normal operation of the ClamAV module. So these are indeed false positives. When using Immunet Free with another AV it is important to use exclusions for both programs to avoid conflicts such as this. Add an exclusion to MSE for Immunet's complete Program Files folder. C:\Program Files\Immunet would be the correct file path to use. Here is a link that explains how to add exclusions for Microsoft Security Essentials. http://maximumpcguid...le-or-location/ Also see if you can restore those files that MSE has quarantined. Then add an exclusion to Immunet for MSE's Program Files folder in Settings. Exclusions allows users to to exclude certain files, directories and file types from being scanned. As the screenshot below illustrates, exclusions can be designated by file or folder, by file extension or by threat name. Cheers, Ritchie... Link to comment Share on other sites More sharing options...
vishnugb Posted June 14, 2014 Report Share Posted June 14, 2014 MSE has a feature of being able to select processes to exclude from being sscanned. When you select exclusions in Immunet, does that automatically apply? Thanks a lot! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.