Jump to content

Microsoft Security Essentials Detected Monitoring Tool Ardamax In Immunet 3.0 Temp Files

Recommended Posts

Immunet.3 version:

OS: Microsoft Windows 7 Home Premium

Installed Antivirus Product: Microsoft Security Essentials


Issue: Microsoft Security Essentials (MSE) detected monitoring tool Ardamax in Immunet 3 temp files


MSE Report:

MonitoringTool: Win32/Ardamax


Category: Monitoring Software


Description: This program monitors user information.


Recommended action: Remove this software immediately.



file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a95.tmp

file:C:\Program Files\Immunet\clamav\temp\clamtmp\00002a96.tmp


Get more information about this item online.


Is this normal behaviour?

Or could this be a false positive raised by MSE?

Edited by paranoid_geek

Share this post

Link to post
Share on other sites

Those are temp files used during the normal operation of the ClamAV module. So these are indeed false positives. When using Immunet Free with another AV it is important to use exclusions for both programs to avoid conflicts such as this. Add an exclusion to MSE for Immunet's complete Program Files folder. C:\Program Files\Immunet would be the correct file path to use. Here is a link that explains how to add exclusions for Microsoft Security Essentials. http://maximumpcguid...le-or-location/ Also see if you can restore those files that MSE has quarantined. Then add an exclusion to Immunet for MSE's Program Files folder in Settings.


Exclusions allows users to to exclude certain files, directories and file types from being scanned. As the screenshot below illustrates, exclusions can be designated by file or folder, by file extension or by threat name.



Cheers, Ritchie...

  • Like 1

Share this post

Link to post
Share on other sites

MSE has a feature of being able to select processes to exclude from being sscanned. When you select exclusions in Immunet, does that automatically apply?


Thanks a lot!

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...