Microsoft Security Essentials Detected Monitoring Tool Ardamax In Immunet 3.0 Temp Files

[paranoid_geek]

Immunet.3 version: 3.1.8.9567

OS: Microsoft Windows 7 Home Premium

Installed Antivirus Product: Microsoft Security Essentials

 

Issue: Microsoft Security Essentials (MSE) detected monitoring tool Ardamax in Immunet 3 temp files

 

MSE Report:

MonitoringTool: Win32/Ardamax

 

Category: Monitoring Software

 

Description: This program monitors user information.

 

Recommended action: Remove this software immediately.

 

Items:

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a95.tmp

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a96.tmp

 

Get more information about this item online.

 

Is this normal behaviour?

Or could this be a false positive raised by MSE?

[ritchie58]

Those are temp files used during the normal operation of the ClamAV module. So these are indeed false positives. When using Immunet Free with another AV it is important to use exclusions for both programs to avoid conflicts such as this. Add an exclusion to MSE for Immunet's complete Program Files folder. C:\Program Files\Immunet would be the correct file path to use. Here is a link that explains how to add exclusions for Microsoft Security Essentials. http://maximumpcguid...le-or-location/ Also see if you can restore those files that MSE has quarantined. Then add an exclusion to Immunet for MSE's Program Files folder in Settings.

 

Exclusions allows users to to exclude certain files, directories and file types from being scanned. As the screenshot below illustrates, exclusions can be designated by file or folder, by file extension or by threat name.

 

Cheers, Ritchie...

[vishnugb]

MSE has a feature of being able to select processes to exclude from being sscanned. When you select exclusions in Immunet, does that automatically apply?

 

Thanks a lot!