Jump to content

Microsoft Security Essentials Detected Monitoring Tool Ardamax In Immunet 3.0 Temp Files

Recommended Posts

Immunet.3 version:

OS: Microsoft Windows 7 Home Premium

Installed Antivirus Product: Microsoft Security Essentials


Issue: Microsoft Security Essentials (MSE) detected monitoring tool Ardamax in Immunet 3 temp files


MSE Report:

MonitoringTool: Win32/Ardamax


Category: Monitoring Software


Description: This program monitors user information.


Recommended action: Remove this software immediately.



file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a95.tmp

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a96.tmp


Get more information about this item online.


Is this normal behaviour?

Or could this be a false positive raised by MSE?

Link to comment
Share on other sites

Those are temp files used during the normal operation of the ClamAV module. So these are indeed false positives. When using Immunet Free with another AV it is important to use exclusions for both programs to avoid conflicts such as this. Add an exclusion to MSE for Immunet's complete Program Files folder. C:\Program Files\Immunet would be the correct file path to use. Here is a link that explains how to add exclusions for Microsoft Security Essentials. http://maximumpcguid...le-or-location/ Also see if you can restore those files that MSE has quarantined. Then add an exclusion to Immunet for MSE's Program Files folder in Settings.


Exclusions allows users to to exclude certain files, directories and file types from being scanned. As the screenshot below illustrates, exclusions can be designated by file or folder, by file extension or by threat name.



Cheers, Ritchie...

Link to comment
Share on other sites

  • 4 months later...


This topic is now archived and is closed to further replies.

  • Create New...